Open-Xchange · Report #199321
IDOR - Deleting other user's signature via /appsuite/api/snippet?action=update (although an error is thrown)
$300bounty
20upvotes
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.