Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2018/10/18 10:35 a.m.29 views

Gatecoin: API request signature can be reused with other parameters/data than the original in certain cases

If an attacker can intercept/see an API-request from a client who has a system-clock that is slightly ahead of the server time then the attacker can re-use the API request-signature towards the same URL but with a different payload. This can for some of the endpoint lead to serious vulnerabilitie...

SaveExploits0
Rows per page
Query Builder