Lark Technologies · Report #1080700
Viewer is able to leak the previous versions of the file
Validstatus
mediumseverity
17upvotes
24 Oct 2022disclosed
Summary
A vulnerability was found where a low level user with only view permissions to a specific file version was able to access previous versions of the file without proper access permissions. We thank @snapsec for reporting this to our team.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.