Lark Technologies · Report #1335070
Removed user can still view comments on the file/documents.
Validstatus
mediumseverity
18upvotes
20 Oct 2022disclosed
Summary
A vulnerability was found using a message API endpoint which could have resulted in a user being able to retrieve comments from a document after being removed. We thank @imran_nisar for reporting this to our team.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.