Insecure Direct Object Reference - access to other user/group DM's

访问控制 / 权限提升 / #53858

厂商

X / xAI

严重程度

未评级

赏金

—

弱点

权限提升

研究员

@akhil-reni

披露日期

2015-10-03

资产

—

CVE

—

该报告还没有中文解读。

I found a way to access group DM's which i don't have access to, Conditions to be met: - Should have been in that DM group atleast once.