地图
浏览
CVE
测试载荷
绕过技巧
API
接入 AI
关于
POJIA
破甲
查找
接入 AI
模型控制台
地图 / Missing authorization allows sales only user to record payment.
Missing authorization allows sales only user to record payment.
访问控制
/
Missing Authorization
/ #919008
厂商
Visma Public
严重程度
未评级
赏金
$250
弱点
Missing Authorization
研究员
—
披露日期
—
资产
—
CVE
—
该报告还没有中文解读。
时间线
暂无时间线。
阅读 HackerOne 原文 ↗
作者 见原文 · 版权归作者与 Visma Public 所有
同类报告
Access token stealing.
PlayStation · 2020-11-21 · $1,200
JaaS SIP Gateway Authorization Bypass
8x8 · 2026-08-12 · $500
SELECT ... INTO OUTFILE does not enforce the FILE WRITE privilege unprivileged arbitrary file write on the server
SingleStore · 2026-07-13
Unrestricted access to quiesce functionality in dss.api.playstation.com REST API leads to unavailability of application
PlayStation · 2021-03-30 · $1,000
Bypassing authorization of linked Instagram account
TikTok · 2022-09-30 · $170
Unauthorized access to choice.av.ru control panel
Azbuka Vkusa · 2021-12-19