地图 / Deprecated Hacker101 coursework repository mentions Heroku App that is susceptible to takeover

Deprecated Hacker101 coursework repository mentions Heroku App that is susceptible to takeover

注入与走私 / Externally Controlled Reference to a Resource in Another Sphere / #514451

厂商: HackerOne
严重程度: 低危 · CVSS 0
赏金: $500
弱点: Externally Controlled Reference to a Resource in Another Sphere
研究员: @m7mdharoun
披露日期: 2019-04-04
资产: https://ctf.hacker101.com
CVE: —

该报告还没有中文解读。

原文摘录

摘自原文（556 字符中的一小部分）

Hi , I'm sure this repo on GitHub `https://github.com/Hacker0x01` belong to `Hackerone,inc`. I've found that your docs on it mention a Heroku app `breaker101.herokuapp.com ` which is no longer work and I could takeover it via HeroKu.

默认不展示报告全文。以上为简短摘录，完整复现过程请阅读原文。版权归研究员与 HackerOne 所有。

时间线

2019-03-24报告提交
2019-04-04公开披露

阅读 HackerOne 原文 ↗作者 @m7mdharoun · 版权归作者与 HackerOne 所有

Deprecated Hacker101 coursework repository mentions Heroku App that is susceptible to takeover

原文摘录

时间线

同类报告