地图 / Email verification bypasa

Email verification bypasa

访问控制 / Incorrect Authorization / #763458

厂商: Stripo Inc
严重程度: 中危
赏金: —
弱点: Incorrect Authorization
研究员: @veejeey_
披露日期: 2020-03-24
资产: my.stripo.email
CVE: —

该报告还没有中文解读。

时间线

2019-12-23报告提交
2020-03-24公开披露

阅读 HackerOne 原文 ↗作者 @veejeey_ · 版权归作者与 Stripo Inc 所有

同类报告

Full access to internal Gitlab instances at redash.gitlab.com, dashboards.gitlab.com, prometheus.gitlab.comGitLab · 2019-04-19 inDriver Job - Admin Approval BypassinDrive · 2023-07-05 · $1,000 IDOR Leads To User Profile Modification https://mtnmobad.mtnbusiness.com.ng/app/updateUserMTN Group · 2024-09-18 A user can bypass approval step in Hacker Publishing feature, allowing them to publish reports immediatelyHackerOne · 2018-12-05 · $2,500 CVE-2026-3784: wrong proxy connection reuse with credentialscurl · 2026-03-11 Incorrect Authorization leads to see other users Documents UploadedTennessee Valley Authority · 2023-11-30