writeups.xyz / We Hacked Larksuite For 1 month and Here is what we found

Submitter : c2a

Date: 4 July 2022

Bounty : undisclosed

Vulnerabilities :

• XSS
• IDOR
• Privilege Escalation
• Broken Access Control
• CSRF
• 40x Bypass

Programs :

• Lark Technologies

Authors :

• Snap Sec (@Snap_sec)

Link :
https://web.archive.org/web/20220716152713/https://snapsec.co/blog/hacking-larksuite/