writeups.xyz / Unauthenticated GraphQL Introspection and API calls

Submitter : c2a

Date: 26 February 2023

Bounty : undisclosed

Vulnerabilities :

• GraphQL
• Missing Authentication

Programs :

• Undisclosed

Authors :

• Osama Avvan (@Osamaavvan)

Link :
https://medium.com/@osamaavvan/unauthenticated-graphql-introspection-and-api-calls-92f1d9d86bcf