Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2014/03/02 8:57 p.m.33 views

Slack: Data exports stored on S3 can be scraped easily

The URLs that are used to download the exports can be guessed easily by an attacker. The location of the export file is based on a date, a team ID and a team name: http://s3-us-west-2.amazonaws.com/slack-files2//export//%20Slack%20export%20.zip The information an attacker needs, is the team its...

6.8AI score
SaveExploits0
Rows per page
Query Builder