HackerOne Bug Bounty Disclosure: conduit-feed-publish-api-allows-you-to-spoof-other-users-or-make-it-look-like-you-have-access-to-a-restricted-objectbydyls

An Ad-Free Experience: No more interruptions like this.
Exclusive Perks: Access to special content.
Direct Support: Help us grow and improve by supporting our work directly.

Programme

HackerOne

Conduit feed.publish API allows you to spoof other users or make it look like you have access to a restricted object

Tags: bug bounty