writeups.xyz / How I was able to read any users confidential reports on a public level domain

Submitter : c2a

Date: 10 March 2022

Bounty : undisclosed

Vulnerabilities :

• IDOR

Programs :

• Undisclosed

Authors :

• Tobydavenn

Link :
https://medium.com/@tobydavenn/how-i-was-able-to-read-any-users-confidential-reports-on-a-public-level-domain-1e563857b0b9