Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2023/01/10 3:37 p.m.135 views

EXNESS: Double forward slash breaks server-side restrictions & allows access to prohibited services from a partner account

A vulnerability was discovered where making an API call with double/multiple forward slashes broke server-side restrictions imposed upon a partner account, allowing unrestricted access to the autorebates facility, which was otherwise unavailable to the partner account...

7AI score
SaveExploits0
Rows per page
Query Builder