POJIA破甲
地图 / Unauthenticated GraphQL access by prepending __schema to private operations

Unauthenticated GraphQL access by prepending __schema to private operations

身份认证 / 认证绕过 / #3452015

厂商
Enjin
严重程度
低危 · CVSS 5.3
赏金
$500
弱点
认证绕过
研究员
@pwnie
披露日期
2025-12-05
资产
platform.enjin.io
CVE
—

该报告还没有中文解读。

时间线

  • 报告提交
  • 公开披露
阅读 HackerOne 原文 ↗作者 @pwnie · 版权归作者与 Enjin 所有

同类报告

Stealing SSO Login Tokens (snappublisher.snapchat.com)Snapchat · 2021-07-29 · $7,500Account Takeover in Password Reset FunctionMars · 2025-09-022FA bypass possible on https://authsvc.singlestore.comSingleStore · 2025-10-22AWS *.a2z.com | Unauthenticated Clickhouse UI : Database access + SSRFAWS VDP · 2026-07-222FA Bypass via Response Manipulation on Login PageU.S. Dept Of Defense · 2026-01-12