Veris · Report #123712
Insecure Direct 'org-invite-log' References
Validstatus
2upvotes
18 Mar 2016disclosed
Summary
The particular issue was related to Insecure Direct Object Reference vulnerability where a particular API was not included in the main permission sets. So the enumeration attacks could be executed.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.