Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2016/03/02 2:3 p.m.23 views

Veris: Critical IDOR - Delete any venue of any organization remotely

Hello Team, I have found a critical IDOR issue which escalates a user privilege and allows and attacker to delete any venue of any organization remotely through his own account by just changing the venue id in DELETE Request. This is again similar to previously reported critical IDORs to delete a...

0.7AI score
SaveExploits0
Rows per page
Query Builder