地图
浏览
CVE
测试载荷
绕过技巧
API
接入 AI
关于
POJIA
破甲
查找
接入 AI
模型控制台
地图 / Logic flaw in the Post creation process allows creating posts with arbitrary types without needing the corresponding nonce
Logic flaw in the Post creation process allows creating posts with arbitrary types without needing the corresponding nonce
业务逻辑
/
业务逻辑错误
/ #404323
厂商
WordPress
严重程度
中危
赏金
—
弱点
业务逻辑错误
研究员
@simonscannell
披露日期
2019-02-14
资产
WordPress Core
CVE
—
该报告还没有中文解读。
时间线
2018-09-03
报告提交
2019-02-14
公开披露
阅读 HackerOne 原文 ↗
作者 @simonscannell · 版权归作者与 WordPress 所有
同类报告
Modify in-flight data to payment provider Smart2Pay
Valve · 2021-08-10 · $7,500
H1514 Ability to MiTM Shopify PoS Session to Takeover Communications
Shopify · 2019-11-04
Hackerone is not properly deleting user id
HackerOne · 2021-06-11
Double Payout via PayPal
Coinbase · 2018-04-04 · $10,000
Getting New Invitations without Leaving Programs
HackerOne · 2020-10-15
[fleet.city-mobil.ru] Driver balance increasing
Mail.ru · —