writeups.xyz / Abusing Slack’s file-sharing functionality to de-anonymise fellow workspace members

Submitter : c2a

Date: 12 October 2021

Bounty : undisclosed

Vulnerabilities :

• XSLeaks

Programs :

• Slack

Authors :

• Julien Cretel (@Jub0bs)

Link :
https://jub0bs.com/posts/2021-10-12-xsleak-stack/