Semrush · Report #1770858
IDOR vulnerability reveals additional information
Validstatus
criticalseverity
99upvotes
7 Mar 2024disclosed
Summary
An issue was identified in the Content Outline Builder product. Changing a user ID in a GraphQL request could reveal additional information about users of Content Outline builder. The subsequent internal review revealed no evidence of this vulnerability being exploited by unauthorized parties.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.