Bypassing Server-Side Request Forgery filters by abusing a bug in Ruby's native resolver
Bypassing Server-Side Request Forgery filters by abusing a bug in Ruby's native resolver SummaryThis is a security advisory for a bug that I discovered in Resolv::getaddresses that enabled me to bypass multiple Server-Side Request Forgery filters. Applications such as GitLab and HackerOne were affected by this bug. The disclosure of all reports referenced in this advisory follow HackerOne’s Vulner
1
リリース、障害情報などのサービスのお知らせ
最新の人気エントリーの配信
処理を実行中です
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
What Bypassing Razer's DOM-based XSS Patch Can Teach Us
