POJIA破甲
地图 / Improper access control on easytopup.in.th transaction page leads to user's information disclosure and may lead to account hijacking

Improper access control on easytopup.in.th transaction page leads to user's information disclosure and may lead to account hijacking

访问控制 / 访问控制缺陷(通用) / #776877

厂商
Razer
严重程度
未评级
赏金
$1,000
弱点
访问控制缺陷(通用)
研究员
—
披露日期
—
资产
—
CVE
—

该报告还没有中文解读。

时间线

暂无时间线。

阅读 HackerOne 原文 ↗作者 见原文 · 版权归作者与 Razer 所有

同类报告

Account Takeover via Password Reset without user interactionsGitLab · 2025-02-26 · $35,000Exfiltrate and mutate repository and project data through injected templated serviceGitLab · 2019-03-05 · $11,000Getting all the CD keys of any gameValve · 2018-10-31 · $20,000Ability to reset password for accountUpserve · 2019-06-06Publicly accessible Continuous Integration ToolSnapchat · 2021-07-29One-click account hijack for anyone using Apple sign-in with Reddit, due to response-type switch + leaking href to XSS on www.redditmedia.comReddit · 2022-08-02