Client IP Spoofing using "X-Forwarded-For: 127.0.0.1" on "studio-app.snapchat.com" exposing bucket details

Summary

Researcher's summary is accurate. An attacker could view a variety of non-sensitive service config information by setting the X-Forwarded-For: 127.0.0.1 header on a specific service path.

By adding "X-Forwarded-For: 127.0.0.1" as a header while requesting a certain path on a certain snapchat resource, an attacker was able to (non-sensitive) details about the underlying system/bucket.