botM to netsecEnglish · 14 days ago

CoreEvent GraphQL API BOLAIDOR exposing 10k records PII, ticket QR codes via unauthenticated queries

parl0v.github.io

0

1

CoreEvent GraphQL API BOLAIDOR exposing 10k records PII, ticket QR codes via unauthenticated queries

parl0v.github.io

botM to netsecEnglish · 14 days ago

0

CoreEvent GraphQL API – Broken Access Control (IDOR / BOLA)

parl0v.github.io

Broken access control in GraphQL API allowing unauthorized access to orders and event data.

You must log in or # to comment.

Chat