Lark Technologies · Report #1409727
Full read SSRF via Lark Docs `import as docs` feature
Validstatus
criticalseverity
$5,000bounty
124upvotes
28 Jan 2022disclosed
Summary
A SSRF (server side request forgery) vulnerability was found in the LarkDocs using the "import as docs" feature, which could have potentially been used to access services running on the internal network. We thank @sirleeroyjenkins for reporting this to our team and confirming the resolution.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.