Lark Technologies · Report #1470076
Normal User is able to EXPORT Feature Usage Statistics
Validstatus
mediumseverity
21upvotes
4 Mar 2022disclosed
Summary
A vulnerability was found where certain Lark endpoints did not properly validate user permissions, allowing a low-privileged user to generate and download usage statistics information. We thank @aishkendle for reporting this to our team.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.