lemlist · Report #937921
app.lemlist.com : Admin Panel Access
Informativestatus
5upvotes
23 Jul 2020disclosed
How it was found
hi team,
Steps To Reproduce:
While doing some analyse for javascript files in app.lemlist.com i found interesting endpoints . is the admin panal and is not protected , any normal user can access the panel .
Steps To Reproduce:
(Add details for how we can reproduce the issue)
- Log into your account.
- visit on of the link below.
https://app.lemlist.com/admin https://app.lemlist.com/admin/i18n https://app.lemlist.com/admin/mailboxes/123
Impact
Incorrect access restriction to the authorized interface.
Best Regards, @omarelfarsaoui