地图 / Augur UI data can be completely replaced by an attacker which can lead to fund and reputation loss

Augur UI data can be completely replaced by an attacker which can lead to fund and reputation loss

业务逻辑 / Client-Side Enforcement of Server-Side Security / #386587

厂商: Augur
严重程度: 未评级
赏金: $5,000
弱点: Client-Side Enforcement of Server-Side Security
研究员: —
披露日期: —
资产: —
CVE: —

该报告还没有中文解读。

时间线

暂无时间线。

阅读 HackerOne 原文 ↗作者见原文 · 版权归作者与 Augur 所有

同类报告

Incorrect control of the trial periodNord Security · —Information disclosure by sending a GIFLinkedIn · 2023-04-28 Yelp for Business: locked Email field silently editable via APIYelp · 2026-07-02 Ability to Disable the Login Attempt of any Shopify Owner for 24 hrs (Zero_Click)Shopify · 2022-02-15 · $900 Splatoon 3 In-Match Integrity Bypass via Consensus Reflection Attack on Unordered Peer SubmissionNintendo · 2026-07-02 Unauthenticated read and write access to ALL endpoints of a store is possible for removed staff members who had "Apps" permissionShopify · 2019-10-10