writeups.xyz / Fabric.io API permission apocalypse – Privilege Escalations

Submitter : c2a

Date: 10 July 2017

Bounty : undisclosed

Vulnerabilities :

• Broken Authorization
• Account Takeover

Programs :

• Twitter

Authors :

• WeSecureApp (@Wesecureapp)

Link :
https://wesecureapp.com/blog/fabric-io-api-permission-apocalypse-privilege-escalations