Mavenlink · Report #283419
[app.mavenlink.com] IDOR to view sensitive information
Validstatus
mediumseverity
26upvotes
9 Feb 2018disclosed
Summary
The researcher found an IDOR that when exploited would result in an error message that was too verbose. The verbose error message included the title of the workspace that the user was attempting to access and being denied persmission to.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.