POJIA破甲
地图 / OTP bypass on user account deletion

OTP bypass on user account deletion

业务逻辑 / Modification of Assumed-Immutable Data (MAID) / #803816

厂商
Mail.ru
严重程度
未评级
赏金
—
弱点
Modification of Assumed-Immutable Data (MAID)
研究员
—
披露日期
—
资产
—
CVE
—

该报告还没有中文解读。

时间线

暂无时间线。

阅读 HackerOne 原文 ↗作者 见原文 · 版权归作者与 Mail.ru 所有

同类报告

Changing the 2FA secret key and backup codes without knowing the 2FA OTPHackerOne · 2021-05-06property-expr - Prototype pollutionNode.js third-party modules · 2020-09-24Editing Pentest Summary Report Answers After Submitting ThemHackerOne · 2021-05-06Prototype pollution via console.table propertiesNode.js · 2022-01-11Changes to data in a CVE request after draft via GraphQL queryHackerOne · 2020-05-15[nested-property] Prototype PollutionNode.js third-party modules · 2020-10-27