地图 / Open API - AWS S3 GET Bucket (List Objects) Version 1

Open API - AWS S3 GET Bucket (List Objects) Version 1

信息泄露 / File and Directory Information Exposure / #609233

厂商: ecobee
严重程度: 未评级
赏金: —
弱点: File and Directory Information Exposure
研究员: —
披露日期: —
资产: —
CVE: —

该报告还没有中文解读。

时间线

暂无时间线。

阅读 HackerOne 原文 ↗作者见原文 · 版权归作者与 ecobee 所有

同类报告

File listing through scripts folderTennessee Valley Authority · 2024-02-09 Arbitrary File Reading leads to RCE in the Pulse Secure SSL VPN on the https://████U.S. Dept Of Defense · 2021-07-29 Production Key and Data Found on Subdomain No Longer Operated by Shopify / Dangling DNSShopify · 2024-05-01 Public and secret api key leaked via Solana BBP github repoSolana BBP · —Cookie exposure due to unexpected file permission changecurl · 2025-10-27 LFI on Accounting server and RCE on FliteThermostat admin server50m-ctf · —