POJIA破甲
地图 / Changes to data in a CVE request after draft via GraphQL query

Changes to data in a CVE request after draft via GraphQL query

业务逻辑 / Modification of Assumed-Immutable Data (MAID) / #813300

厂商
HackerOne
严重程度
低危 · CVSS 2.6
赏金
—
弱点
Modification of Assumed-Immutable Data (MAID)
研究员
@haxta4ok00
披露日期
2020-05-15
资产
hackerone.com
CVE
—

该报告还没有中文解读。

原文摘录

摘自原文(4085 字符中的一小部分)
Summary: Our team has conducted a number of studies (tests) in the field of CVE Request. We found several statuses of such requests `Awaiting Publication`, `Pending HackerOne approval`, `Cancelled` .

默认不展示报告全文。以上为简短摘录,完整复现过程请阅读原文。版权归研究员与 HackerOne 所有。

时间线

  • 报告提交
  • 公开披露
阅读 HackerOne 原文 ↗作者 @haxta4ok00 · 版权归作者与 HackerOne 所有

同类报告

Changing the 2FA secret key and backup codes without knowing the 2FA OTPHackerOne · 2021-05-06property-expr - Prototype pollutionNode.js third-party modules · 2020-09-24Editing Pentest Summary Report Answers After Submitting ThemHackerOne · 2021-05-06Prototype pollution via console.table propertiesNode.js · 2022-01-11[nested-property] Prototype PollutionNode.js third-party modules · 2020-10-27[i18next] Prototype pollution attackNode.js third-party modules · 2021-04-26