Vulnerability Summary
HackerOne disclosed report --> https://hackerone.com/reports/3467641 by perxibes
While testing the application at fizzy.do domain asset into https://app.fizzy.do/ subdomain file uploads, I noticed that files and file previews served through Active Storage can be accessed directly via their URLs, without any authentication or authorization checks. These URLs remain accessible to other users and even to unauthenticated visitors, which allows access to private attachments outside the intended application flow.
pyus3rAn Insecure Direct Object Reference (IDOR) vulnerability in the organization API allows authenticated users to manipulate the identifier parameter and retrieve plaintext SFTP credentials belonging to other users or organizations, potentially leading to unauthorized access to sensitive files stored on the SFTP server.
pyus3rAn IDOR vulnerability in a notification configuration endpoint allows an authenticated attacker to modify org_id and username_id to access sensitive user data from other organizations (email, phone, role, etc.).
hackerone-reportsHackerOne disclosed report --> https://hackerone.com/reports/2541962 by giwadaoud
No comments yet.
Be the first to share your thoughts
Log in to join the discussion.
Sign In