3 ms·

I wish the author would have listed the types of issues at work here. Privacy violation is the result of a few types of issues including JSON injection and hor

I wish the author would have listed the types of issues at work here. Privacy violation is the result of a few types of issues including JSON injection and horizontal privilege (maybe vertical) escalation. Also, providing fixes could help lend a hand to developers, both the creators and readers of this post. Please don't take this post as negative, it's a very nice finding which I'm glad is public to the point of helping our user information become safer, and for that I thank you author.

hobs 11y ago
The app authors could have simply read OWASP and been fine, this appears to be direct object access issues, in other words, they had no check to verify that the user sending the request actually had permission to any of the things they requested. Everything else is just manually issuing commands to a "RESTful" interface which does not care which account issues the command. https://www.owasp.org/index.php/Category:OWASP_Top_Ten_Project https://www.owasp.org/index.php/Category:OWASP_Top_Ten_Proje...