Stripo Inc · Report #852413
SSRF in my.stripo.email
Validstatus
highseverity
6upvotes
30 Jun 2020disclosed
Summary
They are a SSRF (Server-side Request Forgery) in https://my.stripo.email An attacker can do an attack and get ip address behind WAF and try to get RCE
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.