地图 / Multiple HTTP Smuggling reports

Multiple HTTP Smuggling reports

注入与走私 / HTTP 请求走私 / #648434

厂商: Internet Bug Bounty
严重程度: 高危 · CVSS 9.8
赏金: —
弱点: HTTP 请求走私
研究员: @regilero
披露日期: 2019-11-12
资产: IBB (Legacy)
CVE: CVE-2015-3183 CVE-2015-5739 CVE-2015-5740 CVE-2015-8852 CVE-2016-10711 CVE-2016-2086 CVE-2016-2216 CVE-2016-6816 CVE-2016-8743 CVE-2017-7656 CVE-2017-7657 CVE-2017-7658 CVE-2018-8004

该报告还没有中文解读。

原文摘录

摘自原文（14817 字符中的一小部分）

Theses reports spreads other several years and are all about **HTTP Smuggling issues** (HTTP Requests or Responses splitting, Cache Poisoning, Security filter bypass). I've made reports on a wide range of open source projects, explaining the (not always easy) problems to the various security …

默认不展示报告全文。以上为简短摘录，完整复现过程请阅读原文。版权归研究员与 Internet Bug Bounty 所有。

时间线

2019-07-17报告提交
2019-11-12公开披露

阅读 HackerOne 原文 ↗作者 @regilero · 版权归作者与 Internet Bug Bounty 所有

同类报告

Bypass for #488147 enables stored XSS on https://paypal.com/signin againPayPal · 2019-08-07 · $20,000 Mass account takeovers using HTTP Request Smuggling on https://slackb.com/ to steal session cookiesSlack · 2020-03-12 Stored XSS on https://paypal.com/signin via cache poisoningPayPal · 2019-08-07 · $18,900 Request smuggling on admin-official.line.me could lead to account takeoverLY Corporation · 2020-05-19 Stealing Zomato X-Access-Token: in Bulk using HTTP Request Smuggling on api.zomato.comEternal · 2020-07-09 Password theft login.newrelic.com via Request SmugglingNew Relic · — · $3,000