writeups.xyz / Insufficient GraphQL API vulnerability due to lack of validation of Authorization Bearer token

Submitter : c2a

Date: 22 February 2023

Bounty : 700

Vulnerabilities :

• GraphQL
• IDOR

Programs :

• Undisclosed

Authors :

• Int (@Intlulz)

Link :
https://0x1int.gitbook.io/blogs/insufficient-graphql-api-vulnerability-due-to-lack-of-validation-of-authorization-bearer-token