地图
浏览
CVE
测试载荷
绕过技巧
API
接入 AI
关于
POJIA
破甲
查找
接入 AI
模型控制台
地图 / Able to continue user creation process after deleting the HTML element that shows the message that the session is closed
Able to continue user creation process after deleting the HTML element that shows the message that the session is closed
身份认证
/
会话过期不足
/ #810400
厂商
Visma Public
严重程度
未评级
赏金
$100
弱点
会话过期不足
研究员
—
披露日期
—
资产
—
CVE
—
该报告还没有中文解读。
时间线
暂无时间线。
阅读 HackerOne 原文 ↗
作者 见原文 · 版权归作者与 Visma Public 所有
同类报告
No Session Expiry after log-out, attacker can reuse the old cookies
Shopify · 2024-05-01 · $500
Insufficient session expiration in the **com.shopify.ping** android app
Shopify · 2021-11-26
Apache Airflow Fab Provider: Application does not invalidate session after password change via Airflow cli
Internet Bug Bounty · 2025-05-29
Improper Session Invalidation – Auto Sign-In Without Credentials After Logout (Affects Chrome & Firefox)
Dust · 2025-04-29
Revoking user session in https://hackerone.com/settings/sessions does not revoke the GraphQL query session
HackerOne · 2018-11-30 · $500
Logout Bypass Vulnerability in Hiro.so
Hiro · 2025-10-31 · $150