Lucene search

K
openbugbountyKun-flyOBB:1218751
HistoryJul 08, 2020 - 1:46 p.m.

git.szinesweb.hu Improper Access Control vulnerability OBB-1218751

2020-07-0813:46:00
kun-fly
www.openbugbounty.org
7

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:

&nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence;
&nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence.

Affected Website: git.szinesweb.hu
Open Bug Bounty Program: Create your bounty program now. It’s open and free.
Vulnerable Application: Custom Code
Vulnerability Type: IAC (Improper Access Control) / CWE-284
CVSSv3 Score: 6.5 [CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N]
Disclosure Standard: Coordinated Disclosure based on ISO 29147 guidelines
Discovered and Reported by: kun-fly
Remediation Guide: OWASP Access Control Cheat Sheet
Export Vulnerability Data: Bugzilla Vulnerability Data
JIRA Vulnerability Data [ Configuration ]
Mantis Vulnerability Data
Splunk Vulnerability Data
XML Vulnerability Data [ XSD ]

Vulnerable URL:

![](data:image/png;base64, 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)

Research’s Comment:

![](data:image/png;base64, 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)

Mirror: Click here to view the mirror

Coordinated Disclosure Timeline

Vulnerability Reported: 8 July, 2020 13:46 GMT
Vulnerability Verified: 10 July, 2020 08:22 GMT
Website Operator Notified: 10 July, 2020 08:22 GMT
a. Using the ISO 29147 guidelines
b. Using publicly available security contacts
c. Using Open Bug Bounty notification framework
d. Using security contacts provided by the researcher
Public Report Published
[without any technical details]: 10 July, 2020 08:22 GMT
Vulnerability Fixed: 10 July, 2020 08:23 GMT