地图 / Revoked deployment collaborator regains access to private comments after active collaborator interaction

Revoked deployment collaborator regains access to private comments after active collaborator interaction

访问控制 / Access Control Check Implemented After Asset is Accessed / #3852102

厂商: Vercel
严重程度: 低危 · CVSS 4.8
赏金: $1,026
弱点: Access Control Check Implemented After Asset is Accessed
研究员: @qub
披露日期: 2026-10-29
资产: *.vercel.live
CVE: —

该报告还没有中文解读。

原文摘录

摘自原文（16428 字符中的一小部分）

A revoked deployment collaborator can regain access to private collaboration data after another active collaborator interacts with the deployment toolbar.

原文中的代码

POST /api/replicache/pull?docID=live_mode_1@prj_Eimqu7kqIMhfOGdw5vYFaDEpSahL@dpl_8ibZZUZ4hjoK9sTZxL44EKeP5wWB HTTP/1.1
Host: vercel.live
Connection: keep-alive
Content-Length: 178
sec-ch-ua-platform: "Windows"
authorization: ████████
x-replicache-requestid: …

默认不展示报告全文。以上为简短摘录，完整复现过程请阅读原文。版权归研究员与 Vercel 所有。

时间线

2026-07-09报告提交
2026-10-29公开披露

阅读 HackerOne 原文 ↗作者 @qub · 版权归作者与 Vercel 所有