地图
浏览
CVE
测试载荷
绕过技巧
API
接入 AI
关于
POJIA
破甲
查找
接入 AI
模型控制台
地图 / "Test target" of the "HTTP target" extension can unintentionally send username and password in the Authorization header
"Test target" of the "HTTP target" extension can unintentionally send username and password in the Authorization header
密码学缺陷
/
敏感信息明文传输
/ #536669
厂商
Zendesk
严重程度
未评级
赏金
—
弱点
敏感信息明文传输
研究员
—
披露日期
—
资产
—
CVE
—
该报告还没有中文解读。
时间线
暂无时间线。
阅读 HackerOne 原文 ↗
作者 见原文 · 版权归作者与 Zendesk 所有
同类报告
Reflected XSS and sensitive data exposure, including payment details, on lioncityrentals.com.sg
Uber · 2020-04-30 · $4,000
Password Reset Link Leaked In Refer Header In Request To Third Party Sites
Nord Security · —
Cleartext Transmission of Sensitive Information Leads to administrator access
Helium · 2020-05-30
fetlife.com/signup_step_profile expose access_token of mapbox.com
FetLife · 2023-11-01
Cleartext Transmission of password via Email
Sheer · 2024-04-22 · $200
Sensitive Info Leak - An Attacker Can Retrieve All the Users Mobile Numbers at https://website-api.production.curve.app/api/waitlist/us
Curve · 2020-10-23