writeups.xyz / We were vulnerable - how a security company could have vulns

Submitter : c2a

Date: 22 June 2022

Bounty : undisclosed

Vulnerabilities :

• Broken Access Control
• Broken Authorization
• Information Disclosure

Programs :

• Volkis

Authors :

• Soman Verma
• Alexei Doudkine (@Skorov8)

Link :
https://www.volkis.com.au/blog/we-were-vulnerable/