POJIA破甲
地图 / Residual Malicious Payloads on HackerOne after Vulnerability Fixes

Residual Malicious Payloads on HackerOne after Vulnerability Fixes

其他弱点 / 输入校验不当 / #3168691

厂商
HackerOne
严重程度
低危 · CVSS 4.3
赏金
—
弱点
输入校验不当
研究员
@joejoe5
披露日期
2026-04-16
资产
hackerone.com
CVE
—

该报告还没有中文解读。

原文摘录

摘自原文(3259 字符中的一小部分)
**Summary:** HackerOne previously carried out remediation work on the vulnerabilities at https://hackerone.com/bugs?subject=user&report_id=2619438 and https://hackerone.com/reports/2483422. However, further investigation reveals that the malicious payloads on HackerOne profiles have not been …

默认不展示报告全文。以上为简短摘录,完整复现过程请阅读原文。版权归研究员与 HackerOne 所有。

时间线

  • 报告提交
  • 公开披露
阅读 HackerOne 原文 ↗作者 @joejoe5 · 版权归作者与 HackerOne 所有

同类报告

Steal ALL collateral during liquidation by exploiting lack of validation in `flip.kick`BlockDev Sp. Z o.o · 2019-10-01Bypass of GitLab CI runner slash fix in YAML validationGitLab · 2019-04-10Bypass "No Links" Restriction in Biography via Protocol-Relative URL (//)Mozilla · 2025-07-29HTML Injection on tiktoktutorials via firstName parameterTikTok · 2021-10-30Bypass of Restricted Keyword "Mozilla" in Display Name Field via Unicode Homoglyphs on addons.allizom.orgMozilla · 2026-04-27 · $500moderate: Apache HTTP Server: mod_rewrite proxy handler substitution (CVE-2024-39573) CWE-20 Improper Input ValidationInternet Bug Bounty · 2024-08-12 · $2,600