Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2018/10/13 3:40 p.m.36 views

Shopify: H1514 Get access to non public information by pivoting with graphql queries

Hi security team, Summary: It is possible to pivot with queries to get access to information you shouldn't have access to according to docs located at https://help.shopify.com/en/api/graphql-admin-api/reference/queryroot Description: I will try to write up all the ones I can find related to...

6.7AI score
SaveExploits0
Rows per page
Query Builder