4 ms·
"The described behavior is a functionality limitation that does not affect the security and privacy of our product" they said.
by evilksandr 5y ago
"The described behavior is a functionality limitation that does not affect the security and privacy of our product" they said.
- XCSme 5y agoIt's a nice find, but I still fail to see how it is a vulnerability or a security issue.
- evilksandr 5y agoI posted a case to HackerOne with the intent to warn against this behavior and with the weakness type "Business Logic Errors". Please, read in my report section "Impact" and my answer about the potentional impact of the reported behavior. But, as maxltv clarified, it's not a policing tool but an authoring tool and described use of the product violate their TOS. My case is relevant if clients use it as a policing tool.
- evilksandr 5y agoWe continued our discussion in this thread https://news.ycombinator.com/item?id=29933516#29947146 https://news.ycombinator.com/item?id=29933516#29947146