Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2022/08/03 6:7 p.m.53 views

Reddit: Getting access of mod logs from any public or restricted subreddit with IDOR vulnerability

Summary: There's no check if the user is moderator of the particular subreddit or not while trying to access the mod logs via gql.reddit.com by using operation id. You can change the parameter subredditName to any target subreddit name which is public or restricted and get access to mod logs of...

6.5AI score
SaveExploits0
Rows per page
Query Builder