Lark Technologies · Report #805023
Sensitive information of helpdesk is being leaked.
Validstatus
mediumseverity
45upvotes
6 Mar 2021disclosed
Summary
Due to improper access control, Larksuite help desk tickets could have been accessed by users who are not owners or admins of the helpdesk. We thank @imran_nisar for reporting this to our team and verifying the resolution.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.