Race condition in performing retest allows duplicated payments
业务逻辑 / Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') / #429026
该报告还没有中文解读。
原文摘录
摘自原文（1339 字符中的一小部分）
There exists a race condition in performing retests. By executing multiple requests to confirm a retest at the same time, a malicious user is paid multiple times for the retest. This allows for stealing money from HackerOne, which could go unnoticed by both HackerOne and the attacker (me).
默认不展示报告全文。以上为简短摘录，完整复现过程请阅读原文。版权归研究员与 HackerOne 所有。
时间线
- 报告提交
- 公开披露
阅读 HackerOne 原文 ↗作者 @cablej · 版权归作者与 HackerOne 所有