HexBrain

lemlist · Report #937921

app.lemlist.com : Admin Panel Access

Informativestatus
5upvotes
23 Jul 2020disclosed

How it was found

hi team,

Steps To Reproduce:

While doing some analyse for javascript files in app.lemlist.com i found interesting endpoints . is the admin panal and is not protected , any normal user can access the panel .

Steps To Reproduce:

(Add details for how we can reproduce the issue)

  1. Log into your account.
  2. visit on of the link below.

https://app.lemlist.com/admin https://app.lemlist.com/admin/i18n https://app.lemlist.com/admin/mailboxes/123

Impact

Incorrect access restriction to the authorized interface.

Best Regards, @omarelfarsaoui

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original