Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2018/07/24 3:39 p.m.89 views

Slack: Bypass of the SSRF protection in Event Subscriptions parameter.

The vulnerability is present in the "Event Subscriptions" parameter where: "Your app can subscribe to be notified of events in Slack for example, when a user adds a reaction or creates a file at a URL you choose. ". URL: https://api.slack.com/apps/YOUAPPCODE/event-subscriptions? When we add a sit...

0.4AI score
SaveExploits0
Rows per page
Query Builder