LY Corporation · Report #969605
Developer uploaded files missing authentication on LINE GAME Developers site(gdc.game.line.me)
Validstatus
highseverity
28upvotes
27 Dec 2021disclosed
Summary
IDOR vulnerability at gdc.game.line.me allowed unauthenticated users to perform brute-force attacks to disclose unauthorized files related to service testing and QA.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.