Lucene search
Bauh0lz3ADEF66F-FC86-4E6D-A540-2FFA59342FF0HistoryJan 04, 2023 - 1:28 p.m.
IDOR allowing to see other users' entries
2023-01-0413:28:07
bauh0lz
www.huntr.dev
8
idor vulnerability
export functionality
user entries
bug bounty
0.001 Low
EPSS
Percentile
23.5%
Description
The exporting entry functionality is vulnerable to an IDOR attack.
Proof of Concept
- Create a new entry as an existing user. Let’s say the entry’s id is 1.
- Create a new user and login as them.
- Go to
http://localhost:8000/export/1.txt.
Related
osv
osv
wallabag contains Improper Authorization via export feature
2023-02-02 19:26:44
CVE-2023-0609
2023-02-01 12:15:09
veracode
veracode
Improper Authorization
2023-02-02 06:50:17
cvelist
cvelist
CVE-2023-0609 Improper Authorization in wallabag/wallabag
2023-02-01 00:00:00
cve
cve
CVE-2023-0609
2023-02-01 12:15:09
prion
prion
Authorization
2023-02-01 12:15:00
nvd
nvd
CVE-2023-0609
2023-02-01 12:15:09
github
github
wallabag contains Improper Authorization via export feature
2023-02-02 19:26:44
cnvd
cnvd
wallabag authorization issue vulnerability
2023-02-09 00:00:00