Inflection: Clickjacking on https://www.goodhire.com/api

Researcher discovered x-frame options missing...

Inflection: Business Logic Flaw allowing Privilege Escalation

Researcher misunderstood the names and permissions assigned to various roles in the GoodHire application - the permissions are working as intended. Nevertheless, the researcher requested for the report to be disclosed...

Inflection: Goodhire Open Redirect

Researcher reported a duplicate issue...