writeups.xyz / From Response To Request, Adding Your Own Variables Inside Of GraphQL Queries For Account Take Over

Submitter : c2a

Date: 23 May 2023

Bounty : undisclosed

Vulnerabilities :

• GraphQL
• IDOR
• Mass Assignment

Programs :

• Undisclosed

Authors :

• Tom Neaves

Link :
https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/from-response-to-request-adding-your-own-variables-inside-of-graphql-queries-for-account-take-over/