Lark Technologies · Report #794904
Users Without Permission Can Download Restricted Files
Validstatus
mediumseverity
25upvotes
18 Oct 2022disclosed
Summary
A vulnerability was found where it was possible to bypass restrictions imposed on downloading a file if the valid file token was known and by accessing at its URL directly. We thank @imran_nisar for reporting this to our team.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.