Submitter : c2a
Date: 3 March 2023
Bounty : undisclosed
Vulnerabilities :
- SSRF
- Insecure Deserialization
- Cypher Injection
- Authentication Bypass
- Authorization Bypass
- XSS
- Open Redirect
- JWT
- JSON Injection
- Cryptographic Issues
- Session Expiration Issue
- Security Code Review
Programs :
Authors :
Link : https://github.blog/2023-03-03-github-security-lab-audited-datahub-heres-what-they-found/