HexBrain

Lark Technologies · Report #1169340

Improper Access Control on Lark Footer Feature

Validstatus
highseverity
28upvotes
18 May 2021disclosed

Summary

Due to improper access control within Lark's footer feature, an attacker could have potentially accessed private files. We thank @imran_nisar for reporting this to our team and confirming the resolution.

How it was found

The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original