Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2015/08/30 6:46 p.m.27 views

Enter: IDOR on remoing Share

Issue In case of Operator Wallets, only Owner has the permission to delete share with any user. But It is possible for any user to delete share for any other user. POC 1. Suppose a wallet BITCOINS is created by user A and shared with user B and C. 2. User B can send the following request and dele...

6.7AI score
SaveExploits0
Rows per page
Query Builder