@wearehackerone.com is vulnerable to namespace attacks due to hackerone.com not being RFC2142 compliant.
该报告还没有中文解读。
原文摘录
摘自原文(2369 字符中的一小部分)
First off, I know RFCs are annoying. Second of all, namespace attacks are a b*tch.
原文中的代码
MAILBOX AREA USAGE ----------- ---------------- --------------------------- ABUSE Customer Relations Inappropriate public behaviour NOC Network Operations Network infrastructure SECURITY Network Security Security bulletins or queries
默认不展示报告全文。以上为简短摘录,完整复现过程请阅读原文。版权归研究员与 HackerOne 所有。
时间线
- 报告提交
- 公开披露
阅读 HackerOne 原文 ↗作者 @thefrog · 版权归作者与 HackerOne 所有