邮箱绑定的严重漏洞 #2

Open
opened 2026-08-07 03:13:19 +00:00 by Dora · 0 comments
Owner

邮箱绑定玩家账户时,不需要在线就可以绑定,并且可以直接通过找回密码来盗取账号。

邮箱绑定玩家账户时,不需要在线就可以绑定,并且可以直接通过找回密码来盗取账号。
youpaishidifu was assigned by Dora 2026-08-07 03:13:19 +00:00
youpaishidifu removed their assignment 2026-08-07 03:23:37 +00:00
Dora was assigned by youpaishidifu 2026-08-07 03:23:37 +00:00
youpaishidifu was assigned by Dora 2026-08-07 03:24:05 +00:00
Dora removed their assignment 2026-08-07 03:24:05 +00:00
youpaishidifu was unassigned by Dora 2026-08-07 03:24:26 +00:00
Dora self-assigned this 2026-08-07 03:24:26 +00:00
Dora added the 高危漏洞 label 2026-08-07 03:43:11 +00:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: youpaishidifu/Sdf1_login#2