| 标题 | Tomofun Furbo 360 ≤ FB0035_FW_036 Server Side Request Forgery |
|---|
| 描述 | An attacker who compromises the Furbo account of a legitimate user can coerce the device to make a request to an attacker-controlled server by modifying the URL which is sent during the recording of a new treat toss sound. The end result is that the Furbo will download a file from the attacker's server. |
|---|
| 用户 | jTag Labs (UID 51246) |
|---|
| 提交 | 2025-09-23 19時11分 (1 年前) |
|---|
| 管理 | 2025-10-11 20時33分 (18 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 328047 [Tomofun Furbo 360 直到 FB0035_FW_036 Account 权限提升] |
|---|
| 积分 | 14 |
|---|