Lark Technologies · Report #1025881
Accessing/Editing Folders of Other Users in the Orginisation.
Validstatus
highseverity
42upvotes
29 Oct 2022disclosed
Summary
A vulnerability was found where users without Primary admin privileges were able to view/modify the directory structure of other users in their organization. This would occur after those users were invited to view/modify their folders by a Primary admin. We thank @snapsec for reporting this to our team.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.