sindre
/
Beelance
Прати 1
Волим 0
Креирај огранак 0
Код Дискусије 6 Захтеви за спајање 0 Издања 0 Вики Activity
Лабеле Фазе
Нови задатак

#9 Account enumeration

Затворено
отворено пре 5 година од sindre · 1 коментара
sindre коментирира пре 5 година

An adversary can view all registered users when applying for aproject.

An adversary can view all registered users when applying for aproject.
sindre added this to the Required fixes milestone пре 5 година
sindre added the
sensitive data exposure
label пре 5 година
sindre added the
bug
label пре 5 година
sindre added the
webpy
label пре 5 година
sindre коментирира пре 5 година
Власник

This can be done by allowing any username, and not indicating whether the user exists or not.

This can be done by allowing any username, and not indicating whether the user exists or not.
sindre затворено пре 5 година
Пријавите се да се прикључе у овом разговору.
No Branch/Tag Specified
Гране Ознаке
Лавеле
Уклони лабеле
broken access control
Broken access control vulnerability broken authentication
Broken authentication vulnerability bug
Something is not working csrf
Cross site request forgery vulnerability enhancement
New feature injection
Injection vulnerability insecure deserialization
Insecure deserialization vulnerability known vulnerability
Using components with known vulnerabilities logging
Insufficient logging vulnerability nginx
Concerns nginx security misconfiguration
Security misconfiguration vulnerability sensitive data exposure
Sensitive data exposure vulnerability webpy
Concerns the webpy framework
Нема лабеле
broken access control
broken authentication
bug
csrf
enhancement
injection
insecure deserialization
known vulnerability
logging
nginx
security misconfiguration
sensitive data exposure
webpy
Фаза
Уклони фазу
Нема фазе
Required fixes
Assignees
Clear assignees
No Assignees
1 учесника
Due Date

No due date set.

Dependencies

This issue currently doesn't have any dependencies.

Write Preview
Loading…
Откажи
Сачувај
Још нема садржаја.
Delete Branch '%!s(MISSING)'

Deleting a branch is permanent. It CANNOT be undone. Continue?

Не
Да