地图 / Request smuggling on admin-official.line.me could lead to account takeover

Request smuggling on admin-official.line.me could lead to account takeover

注入与走私 / HTTP 请求走私 / #740037

厂商: LY Corporation
严重程度: 中危
赏金: —
弱点: HTTP 请求走私
研究员: @shaolin_tw
披露日期: 2020-05-19
资产: *.line.me
CVE: —

该报告还没有中文解读。

时间线

2019-11-18报告提交
2020-05-19公开披露

阅读 HackerOne 原文 ↗作者 @shaolin_tw · 版权归作者与 LY Corporation 所有

同类报告

Bypass for #488147 enables stored XSS on https://paypal.com/signin againPayPal · 2019-08-07 · $20,000 Mass account takeovers using HTTP Request Smuggling on https://slackb.com/ to steal session cookiesSlack · 2020-03-12 Stored XSS on https://paypal.com/signin via cache poisoningPayPal · 2019-08-07 · $18,900 Stealing Zomato X-Access-Token: in Bulk using HTTP Request Smuggling on api.zomato.comEternal · 2020-07-09 Password theft login.newrelic.com via Request SmugglingNew Relic · — · $3,000 HTTP Request Smuggling via HTTP/2Basecamp · 2021-08-27 · $7,500