Lark Technologies · Report #700726
Reflected XSS on Lark Suite
Validstatus
mediumseverity
10upvotes
19 Mar 2021disclosed
Summary
A reflected cross-site scripting (XSS) vulnerability was found at the Lark Suite log-in endpoint via the redirect_uri parameter which could have potentially allowed an attacker to inject malicious code. We thank @jin0ne for reporting this to our team and confirming the resolution.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.