LY Corporation · Report #2473862
Client-Side Path Traversal on LINE Developers Console
Validstatus
mediumseverity
61upvotes
26 Sept 2024disclosed
Summary
LINE Developers Console (https://developers.line.biz) had a Client-Side Path Traversal (CSPT) vulnerability that led to an effective CSRF. Although the operations that could be enforced with the CSRF were limited, some availability could be compromised.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.