Browse / Lark Technologies

Lark Technologies

See its reports on the map

Attack surface: 1,634 known subdomains

Not every host here is in scope. Check the program's policy before testing. Last updated 2026-11-13.

What gets reported to Lark Technologies

• Access Control17
• Cross-site Scripting9
• Server-Side Request Forgery5
• Insecure Direct Object Reference4
• Cross-Site Request Forgery1
• Business Logic1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Stored XSS & SSRF in Lark DocsServer-Side Request Forgery (SSRF) · critical
   $3,000178 votes
2. Server Side Request ForgeryServer-Side Request Forgery (SSRF) · critical
   164 votes
3. Full read SSRF via Lark Docs `import as docs` feature Server-Side Request Forgery (SSRF) · critical
   $5,000124 votes
4. Attacker is able to join any tenant on larksuite and view personal files/chats.Privilege Escalation · critical
   84 votes
5. SSRF with information disclosureServer-Side Request Forgery (SSRF) · medium
   64 votes
6. [Lark Android] Vulnerability in exported activity WebViewCross-site Scripting (XSS) - Generic · medium
   $1,00063 votes
7. Able to steal private files by manipulating response using Compose Email function of LarkInsecure Direct Object Reference (IDOR) · high
   50 votes
8. Reflected xss and open redirect on larksuite.com using /?back_uri= parameter.Cross-site Scripting (XSS) - Reflected · medium
   49 votes
9. Non privileged user is able to approve his own app himself leading to mass privilege escalations.Privilege Escalation · high
   45 votes
10. Sensitive information of helpdesk is being leaked.Improper Access Control - Generic · medium
    45 votes
11. Accessing/Editing Folders of Other Users in the Orginisation.Improper Access Control - Generic · high
    42 votes
12. Improper Access Control allows OTP bypassImproper Access Control - Generic · medium
    40 votes
13. [IDOR] Modify other team's reminders via reminderId parameterInsecure Direct Object Reference (IDOR) · medium
    40 votes
14. Able to steal private files by manipulating response using Auto Reply function of LarkInsecure Direct Object Reference (IDOR) · high
    39 votes
15. RPC Implementation allows unauthenticated remote callsCross-site Scripting (XSS) - DOM · high
    $1,25039 votes
16. Improper generating of access link at go.larksuite.com leads to access to other organizations/users' private dataImproper Access Control - Generic · medium
    33 votes
17. [CSRF] No Csrf protection against sending invitation to join the team.Cross-Site Request Forgery (CSRF) · medium
    30 votes
18. Stored XSS in Satisfaction Surveys via "Ask Reason for Dissatisfaction" optionCross-site Scripting (XSS) - Stored · medium
    29 votes
19. Improper Access Control on Lark Footer FeatureImproper Access Control - Generic · high
    28 votes
20. Hyper Link Injection while signup Business Logic Errors · low
    28 votes
21. Privilege Escalation to All-staff groupImproper Access Control - Generic · medium
    26 votes
22. Users Without Permission Can Download Restricted FilesPrivilege Escalation · medium
    25 votes
23. Normal User is able to EXPORT Feature Usage StatisticsImproper Access Control - Generic · medium
    21 votes
24. Access to private file's of helpdesk.Improper Access Control - Generic · medium
    21 votes
25. User with single department permission can view applicant list of all department'sPrivilege Escalation · medium
    20 votes
26. Stealing app credentials by reflected xss on Lark SuiteCross-site Scripting (XSS) - Reflected · medium
    19 votes
27. Removed user can still view comments on the file/documents.Improper Access Control - Generic · medium
    18 votes
28. Stored xss on helpdesk using user's cityCross-site Scripting (XSS) - Stored · medium
    18 votes
29. Ability to View Non-Permitted Admin LogImproper Access Control - Generic · medium
    17 votes
30. Viewer is able to leak the previous versions of the fileImproper Access Control - Generic · medium
    17 votes
31. IDOR Allows Viewer to Delete Bin's FilesImproper Access Control - Generic · medium
    16 votes
32. Messages disclosure via search feature of other users group(Cross-Tenant).Insecure Direct Object Reference (IDOR) · medium
    15 votes
33. Stored xss in larksuite internal helpdesk and other user's helpdesk.Cross-site Scripting (XSS) - Stored · medium
    13 votes
34. [AWC-Pune] - User can download files deleted by Admin using shortcutsmedium
    11 votes
35. In orginization stored xss using location (Larksuite survey app)Cross-site Scripting (XSS) - Stored · medium
    11 votes
36. Sub-Dept User Can Add User's To Main Department.Improper Privilege Management · medium
    10 votes
37. Reflected XSS on Lark SuiteCross-site Scripting (XSS) - DOM · medium
    10 votes
38. Server Side Request ForgeryServer-Side Request Forgery (SSRF) · low
    9 votes