Tabit - Arbitrary account... CVE-2022-34774

- AV AC AU C I A
发布: 2022-08-22
修订: 2024-11-21

Tabit - Arbitrary account modification. One of the endpoints mapped by the tiny URL, was a page where an adversary can modify personal details, such as email addresses and phone numbers of a specific user in a restaurant's loyalty program. Possibly allowing account takeover (the mail can be used to reset password).

0%
暂无可用Exp或PoC
当前有2条受影响产品信息