← All credits

Cedric Bonhomme

5 vulnerability records and advisories credit this contributor.

Stored Server-Side Request Forgery in Remote-Instance Synchronization Allows Access to Internal Services in vulnerability-lookup

Reusable Account Activation and Recovery Tokens Allow Repeated Account Takeover in vulnerability-lookup

Authorization Bypass in SSE Pub/Sub Allows Unconfirmed Accounts to Access Stream Events in vulnerability-lookup

Stored Cross-Site Scripting (XSS) via Unescaped CNA Reference Tags in vulnerability-lookup

Webhook SSRF guard bypassed by IPv6 transition addresses (NAT64/6to4/Teredo pass is_global check) in vulnerability-lookup