writeups.xyz / Exposing Users Table From a Leaky GraphQL Query

Submitter : c2a

Date: 6 March 2023

Bounty : undisclosed

Vulnerabilities :

• GraphQL
• Broken Authorization
• Broken Access Control

Programs :

• Undisclosed

Authors :

• Inderjeet Singh - Encodedguy (@3nc0d3dGuY)

Link :
https://rashahacks.com/exposing-users-table-from-a-leaky-graphql-query/