writeups.xyz / Broken Access: Posting to Google private groups through any user in the group

Submitter : c2a

Date: 27 April 2019

Bounty : undisclosed

Vulnerabilities :

• Broken Authorization

Programs :

• Google

Authors :

• Elber Andre (@Elber333)

Link :
https://medium.com/@elberandre/broken-access-posting-to-google-private-groups-through-any-user-in-the-group-3becfa818894