POJIA破甲
地图 / Able to continue user creation process after deleting the HTML element that shows the message that the session is closed

Able to continue user creation process after deleting the HTML element that shows the message that the session is closed

身份认证 / 会话过期不足 / #810400

厂商
Visma Public
严重程度
未评级
赏金
$100
弱点
会话过期不足
研究员
—
披露日期
—
资产
—
CVE
—

该报告还没有中文解读。

时间线

暂无时间线。

阅读 HackerOne 原文 ↗作者 见原文 · 版权归作者与 Visma Public 所有

同类报告

No Session Expiry after log-out, attacker can reuse the old cookiesShopify · 2024-05-01 · $500Insufficient session expiration in the **com.shopify.ping** android appShopify · 2021-11-26Apache Airflow Fab Provider: Application does not invalidate session after password change via Airflow cliInternet Bug Bounty · 2025-05-29Improper Session Invalidation – Auto Sign-In Without Credentials After Logout (Affects Chrome & Firefox)Dust · 2025-04-29Revoking user session in https://hackerone.com/settings/sessions does not revoke the GraphQL query sessionHackerOne · 2018-11-30 · $500Logout Bypass Vulnerability in Hiro.soHiro · 2025-10-31 · $150