地图 / AWS *.a2z.com | Unauthenticated Clickhouse UI : Database access + SSRF

AWS *.a2z.com | Unauthenticated Clickhouse UI : Database access + SSRF

身份认证 / 认证绕过 / #3809407

厂商: AWS VDP
严重程度: 中危
赏金: —
弱点: 认证绕过
研究员: @notnotnotveg
披露日期: 2026-07-22
资产: https://*.aws.a2z.com/*
CVE: —

该报告还没有中文解读。

时间线

2026-06-17报告提交
2026-07-22公开披露

阅读 HackerOne 原文 ↗作者 @notnotnotveg · 版权归作者与 AWS VDP 所有

同类报告

Stealing SSO Login Tokens (snappublisher.snapchat.com)Snapchat · 2021-07-29 · $7,500 Account Takeover in Password Reset FunctionMars · 2025-09-02 2FA bypass possible on https://authsvc.singlestore.comSingleStore · 2025-10-22 Unauthenticated GraphQL access by prepending __schema to private operationsEnjin · 2025-12-05 · $500 2FA Bypass via Response Manipulation on Login PageU.S. Dept Of Defense · 2026-01-12