writeups.xyz / How Misconfigured API leaked user private information?

Submitter : c2a

Date: 26 October 2018

Bounty : undisclosed

Vulnerabilities :

• IDOR
• Broken Authorization

Programs :

• Undisclosed

Authors :

• Yeasir Arafat

Link :
https://medium.com/@Skylinearafat/how-misconfigured-api-leaked-user-private-information-e3e8c13e52e4