writeups.xyz / Missing Bricks: Finding Security Holes in LEGO APIs

Submitter : c2a

Date: 15 December 2022

Bounty : undisclosed

Vulnerabilities :

• XSS
• XXE

Programs :

• LEGO

Authors :

• Shiran Yodev

Link :
https://salt.security/blog/missing-bricks-finding-security-holes-in-lego-apis