POJIA破甲
地图 / The parameter in the POST query allows to control size of returned page which in turn can lead to the potential DOS attack

The parameter in the POST query allows to control size of returned page which in turn can lead to the potential DOS attack

拒绝服务 / 资源消耗失控 / #300391

厂商
LocalTapiola
严重程度
未评级
赏金
$315
弱点
资源消耗失控
研究员
—
披露日期
—
资产
—
CVE
—

该报告还没有中文解读。

时间线

暂无时间线。

阅读 HackerOne 原文 ↗作者 见原文 · 版权归作者与 LocalTapiola 所有

同类报告

DoS on PayPal via web cache poisoningPayPal · 2019-10-23 · $9,700profile-picture name parameter with large value lead to DoS for other users and programs on the platformHackerOne · 2020-03-25Denial of service to WP-JSON API by cache poisoning the CORS allow origin headerAutomattic · 2020-04-16[Urgent] Invalidating OAuth2 Bearer token makes TweetDeck unavailableX / xAI · 2019-04-25Oracle Webcenter Sites administrative and hi-privilege access available directly from the internet (/cs/Satellite)LocalTapiola · — · $18,000Denial of service via cache poisoningHackerOne · 2018-12-22 · $2,500