地图 / SSRF vulnerability on ██████████ leaks internal IP and various sensitive information

SSRF vulnerability on ██████████ leaks internal IP and various sensitive information

服务端请求伪造 / SSRF / #310036

厂商: U.S. Dept Of Defense
严重程度: 低危
赏金: —
弱点: SSRF
研究员: @alyssa_herrera
披露日期: 2019-12-02
资产: —
CVE: —

该报告还没有中文解读。

原文摘录

摘自原文（2094 字符中的一小部分）

**Summary:** A server side request forgery vulnerability appears to leak an internal IP address and tries to connect to an attacker controlled host. **Description:** In an normal request on this web page

原文中的代码

Host: www.████████
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Cookie: mt=rid=6130; …

默认不展示报告全文。以上为简短摘录，完整复现过程请阅读原文。版权归研究员与 U.S. Dept Of Defense 所有。

时间线

2018-01-28报告提交
2019-12-02公开披露

阅读 HackerOne 原文 ↗作者 @alyssa_herrera · 版权归作者与 U.S. Dept Of Defense 所有

同类报告

SSRF in Exchange leads to ROOT access in all instancesShopify · 2018-05-23 Server Side Request Forgery (SSRF) via Analytics ReportsHackerOne · 2023-12-08 · $25,000 Server-Side Request Forgery using Javascript allows to exfill data from Google MetadataSnapchat · 2020-11-30 Server Side Request Forgery (SSRF) at app.hellosign.com leads to AWS private keys disclosureDropbox · — · $4,913 SSRF on project import via the remote_attachment_url on a NoteGitLab · 2020-06-07 · $10,000 Server Side Request Forgery mitigation bypassGitLab · 2020-04-18

SSRF vulnerability on ██████████ leaks internal IP and various sensitive information · 破甲 POJIA