地图 / HTTP Host Header Injection on app.goodhire.com

HTTP Host Header Injection on app.goodhire.com

注入与走私 / HTTP Response Splitting / #277354

厂商: Inflection
严重程度: 低危
赏金: —
弱点: HTTP Response Splitting
研究员: @anonymousmian
披露日期: 2017-11-01
资产: app.goodhire.com
CVE: —

该报告还没有中文解读。

时间线

2017-10-15报告提交
2017-11-01公开披露

阅读 HackerOne 原文 ↗作者 @anonymousmian · 版权归作者与 Inflection 所有

同类报告

HTTP Response Header Injection in shopify/pitchfork + Rack 3Shopify · 2025-03-27 · $800 HTTP Smuggling multiple issues in Squid 3.x & squid 4.xInternet Bug Bounty · 2021-08-26 Http request splittingNode.js · 2020-01-15 [m.airbnb.com] CRLF InjectionAirbnb · 2018-04-03 · $2,500 [newscdn.starbucks.com] CRLF Injection, XSSStarbucks · 2017-03-09 HTTP/2 and HTTP/3 Header Injection in curlcurl · 2025-12-30