writeups.xyz / Personal Access Token Disclosure in Asana Desktop Application

Submitter : c2a

Date: 18 June 2022

Bounty : 6,100

Vulnerabilities :

• Information Disclosure
• Hardcoded Credentials

Programs :

• Asana

Authors :

• Lauritz Holtmann (@_Lauritz_)

Link :
https://security.lauritz-holtmann.de/advisories/asana-desktop-credential-disclosure/