3 ms·
summary quotes: > The issues we reported allow any attacker to access all data, including private posts, private messages, shared media and even deleted direct
by spindle 4y ago
summary quotes:
> The issues we reported allow any attacker to access all data, including private posts, private messages, shared media and even deleted direct messages. This also includes private email addresses and phone numbers entered during login.
> Attackers can also overwrite data such as posts owned by other users
- charcircuit 4y agono authorization on some endpoints + enumeration I presume