sindre
/
Beelance
Наблюдаван 1
Харесван 0
Разклонения 0
Код Задачи 6 Заявки за сливане 0 Версии 0 Уики Activity
Етикети Етапи
Нова задача

#9 Account enumeration

Затворени
отворен преди 5 години от sindre · 1 коментара
sindre коментира преди 5 години

An adversary can view all registered users when applying for aproject.

An adversary can view all registered users when applying for aproject.
sindre added this to the Required fixes milestone преди 5 години
sindre added the
sensitive data exposure
label преди 5 години
sindre added the
bug
label преди 5 години
sindre added the
webpy
label преди 5 години
sindre коментира преди 5 години
Притежател

This can be done by allowing any username, and not indicating whether the user exists or not.

This can be done by allowing any username, and not indicating whether the user exists or not.
Впишете се за да се присъедините към разговора.
No Branch/Tag Specified
Клонове Маркери
Етикети
Изчисти етикети
broken access control
Broken access control vulnerability broken authentication
Broken authentication vulnerability bug
Something is not working csrf
Cross site request forgery vulnerability enhancement
New feature injection
Injection vulnerability insecure deserialization
Insecure deserialization vulnerability known vulnerability
Using components with known vulnerabilities logging
Insufficient logging vulnerability nginx
Concerns nginx security misconfiguration
Security misconfiguration vulnerability sensitive data exposure
Sensitive data exposure vulnerability webpy
Concerns the webpy framework
Няма етикет
broken access control
broken authentication
bug
csrf
enhancement
injection
insecure deserialization
known vulnerability
logging
nginx
security misconfiguration
sensitive data exposure
webpy
Етап
Изчисти етап
Няма етап
Required fixes
Assignees
Clear assignees
No Assignees
1 участника
Due Date

No due date set.

Dependencies

This issue currently doesn't have any dependencies.

Write Preview
Loading…
Отказ
Запис
Все още няма съдържание.
Delete Branch '%!s(MISSING)'

Deleting a branch is permanent. It CANNOT be undone. Continue?

Не
Да