writeups.xyz / Bypassing SSRF Protection to Exfiltrate AWS Metadata from LarkSuite

Submitter : c2a

Date: 28 January 2022

Bounty : undisclosed

Vulnerabilities :

• SSRF

Programs :

• Lark Technologies

Authors :

• SirLeeroyJenkins (@SirLeeroyJenkin)

Link :
https://sirleeroyjenkins.medium.com/bypassing-ssrf-protection-to-exfiltrate-aws-metadata-from-larksuite-bf99a3599462