POJIA破甲
地图 / Subdomain takeover of resources.hackerone.com

Subdomain takeover of resources.hackerone.com

错误配置 / Unlabeled / #863551

厂商
HackerOne
严重程度
低危 · CVSS 3.6
赏金
$500
弱点
Unlabeled
研究员
@amans
披露日期
2020-05-15
资产
www.hackerone.com
CVE
—

该报告还没有中文解读。

原文摘录

摘自原文(895 字符中的一小部分)
I just went to https://resources.hackerone.com/ and it shows an error "Non-hub domain, The URL you've accessed does not provide a hub. Please check the URL and try again." also i've checked the CNAME is poiting to read.uberflip.com which means if it is not added it can be added to any account, as …

默认不展示报告全文。以上为简短摘录,完整复现过程请阅读原文。版权归研究员与 HackerOne 所有。

时间线

  • 报告提交
  • 公开披露
阅读 HackerOne 原文 ↗作者 @amans · 版权归作者与 HackerOne 所有

同类报告

Able to Takeover Merchants Accounts Even They Have Already Setup SSO, After Bypassing the Email ConfirmationShopify · 2020-04-01[www.zomato.com] CORS Misconfiguration, could lead to disclosure of sensitive informationEternal · 2018-11-28 · $550Hackerone supports accounts organitation takeoverHackerOne · 2024-11-19 · $2,500CORS misconfiguration allows to steal client's "password", Authorization token and the customer details e.g. names, SSN, bank account etc.LocalTapiola · —Clickjacking in main domain https://topechelon.com/Top Echelon Software · 2025-02-10Subdomain takeover dew to missconfigured project settings for Custom domain .Flock · —