地图 / Stored CSS Injection

Stored CSS Injection

注入与走私 / 资源注入 / #315865

厂商: Coinbase
严重程度: 未评级
赏金: —
弱点: 资源注入
研究员: @cablej
披露日期: 2018-04-02
资产: *.coinbase.com
CVE: —

该报告还没有中文解读。

时间线

2018-02-14报告提交
2018-04-02公开披露

阅读 HackerOne 原文 ↗作者 @cablej · 版权归作者与 Coinbase 所有

同类报告

Arbitrary local system file read on open-xchange serverOpen-Xchange · — · $2,000 Nextcloud Desktop Client RCE via malicious URI schemesNextcloud · 2021-04-15 · $1,000 [Xenoblade Chronicles X: Definitive Edition] Unrestricted RPCs allow DoS and writing arbitrary flags remotelyNintendo · 2025-05-15 HTML injection possible with soft email confirmations when Administrator manually confirms attacker email addressGitLab · 2024-10-08 · $1,060 Content injection in Jira issue title enabling sending arbitrary POST request as victimGitLab · 2022-09-22 Arbitrary POST request as victim user from HTML injection in Jupyter notebooksGitLab · 2022-05-20