地图 / Google Maps API key leaked during device pairing

Google Maps API key leaked during device pairing

信息泄露 / Information Exposure Through Sent Data / #724039

厂商: Ping Identity
严重程度: 低危 · CVSS 4.9
赏金: $150
弱点: Information Exposure Through Sent Data
研究员: @bug_digger21
披露日期: 2020-04-28
资产: https://ort-admin.pingone.com/*
CVE: —

该报告还没有中文解读。

时间线

2019-10-28报告提交
2020-04-28公开披露

阅读 HackerOne 原文 ↗作者 @bug_digger21 · 版权归作者与 Ping Identity 所有

同类报告

Unauthenticated API Access Exposing Premium Content and Financial DataXVIDEOS · 2025-02-09 Credential leak on redirect due to improper state clearing when parsing macdef in netrc.ccurl · 2025-06-22 curl cookie mixed case PSL bypassInternet Bug Bounty · 2023-12-22 · $2,540 API Data Leakage Vulnerability Report - `xvcams.com`XVIDEOS · 2025-02-09 Domainless COOKIEFILE cookie leaks to unrelated IP-literal hostscurl · 2026-08-21 CVE-2023-46218: cookie mixed case PSL bypasscurl · 2023-12-06