POJIA破甲
地图 / GitHub users outside of HackerOne organization can create and update Wiki pages of certain public HackerOne repositories

GitHub users outside of HackerOne organization can create and update Wiki pages of certain public HackerOne repositories

其他弱点 / 钓鱼 / #459634

厂商
HackerOne
严重程度
低危
赏金
—
弱点
钓鱼
研究员
@mik317
披露日期
2018-12-12
资产
—
CVE
—

该报告还没有中文解读。

原文摘录

摘自原文(1004 字符中的一小部分)
**Summary** Hi HackerOne team, recently this vulnerability have been reported and resolved in various programs, so I'm going to try my bad luck, reporting the same kind of report also in this program.

默认不展示报告全文。以上为简短摘录,完整复现过程请阅读原文。版权归研究员与 HackerOne 所有。

时间线

  • 报告提交
  • 公开披露
阅读 HackerOne 原文 ↗作者 @mik317 · 版权归作者与 HackerOne 所有

同类报告

URL link spoofingSlack · 2020-04-26 · $250Github Account hijack through broken link in developer.twitter.comX / xAI · 2021-02-04Subdomain Takeover on demo.greenhouse.io pointing to unbouncepagesGreenhouse.io · 2020-03-05Domain Takeover [3737signals.com]Basecamp · 2021-08-13Login CSRF : Login Authentication Flaw on https://liberapay.com/Liberapay · 2021-04-05account impersonate through broken linkQIWI · —