writeups.xyz / Broken session control leads to access private videos using the shared link even after revoking the access for specific time!! — #GoogleVRP

Submitter : c2a

Date: 20 March 2022

Bounty : undisclosed

Vulnerabilities :

• Broken Access Control

Programs :

• Google

Authors :

• Naveenroy

Link :
https://naveenroy008.medium.com/broken-session-control-leads-to-access-private-videos-using-the-shared-link-even-after-revoking-the-84e31ac16fe4