POJIA破甲
地图 / Race Condition in Oauth 2.0 flow can lead to malicious applications create multiple valid sessions

Race Condition in Oauth 2.0 flow can lead to malicious applications create multiple valid sessions

业务逻辑 / Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') / #699112

厂商
Razer
严重程度
未评级
赏金
$250
弱点
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
研究员
—
披露日期
—
资产
—
CVE
—

该报告还没有中文解读。

时间线

暂无时间线。

阅读 HackerOne 原文 ↗作者 见原文 · 版权归作者与 Razer 所有

同类报告

Race condition in performing retest allows duplicated paymentsHackerOne · 2018-12-27Race Condition when following a userStaging.every.org · 2020-09-09Race Condition Enables Bypassing Verification CheckTools for Humanity · 2024-04-04 · $3,000Race Condition in Flag SubmissionHackerOne · 2019-07-22Session works after logout from Shopify accountShopify · 2020-03-30Race condition leads to add more than 5 email at Data breaches monitor system at https://stage.firefoxmonitor.nonprod.cloudops.mozgcp.netMozilla · 2024-10-18