writeups.xyz / How i was able to steal private files of any user on Larksuite

Submitter : c2a

Date: 24 August 2021

Bounty : undisclosed

Vulnerabilities :

• IDOR

Programs :

• Undisclosed

Authors :

• Imran Nissar (@Imrannissar3)

Link :
https://web.archive.org/web/20210825045217/https://medium.com/@imunissar786/how-i-was-able-to-steal-private-files-of-any-user-on-larksuite-c0e2757429e2