POJIA破甲
地图 / Privilege Escalation in Point Of Sale Application from POS Manage Staff Role to potentially Store Owner

Privilege Escalation in Point Of Sale Application from POS Manage Staff Role to potentially Store Owner

访问控制 / Unlabeled / #985150

厂商
Shopify
严重程度
低危
赏金
—
弱点
Unlabeled
研究员
@imgnotfound
披露日期
2020-11-19
资产
Shopify Developed Apps
CVE
—

该报告还没有中文解读。

原文摘录

摘自原文(2419 字符中的一小部分)
I was playing a bit with the Point Of Sale application and it came to my attention that it is possible to navigate from the Point Of Sale Application up to the Plan & Permission in the admin. I am not sure if this is intentional, but since it leads to potentially take over a shop, I'm reporting it.

默认不展示报告全文。以上为简短摘录,完整复现过程请阅读原文。版权归研究员与 Shopify 所有。

时间线

  • 报告提交
  • 公开披露
阅读 HackerOne 原文 ↗作者 @imgnotfound · 版权归作者与 Shopify 所有

同类报告

Email Confirmation Bypass in myshop.myshopify.com that Leads to Full Privilege Escalation to Any Shop Owner by Taking Advantage of the Shopify SSOShopify · 2020-04-01[Part II] Email Confirmation Bypass in myshop.myshopify.com that Leads to Full Privilege EscalationShopify · 2020-04-01Broken Access Control leads to disclosure of transaction history via /v2/rechargeTransactionHistory endpointMTN Group · 2025-03-02[Mail.Ru Android] Typo in permission name allows to write contacts without user knowledgeMail.ru · —Privilege Escalation to Root SSH Access via Pre-Receive Hook Environment in GitHub Enterprise ServerGitHub · 2024-09-13Improper State Validation on Sony WH-CH520 via BLE Command Service leads to unauthorized Bluetooth pairing and audio hijackingSony · —