地图 / Sub-Dept User Can Add User's To Main Department.

Sub-Dept User Can Add User's To Main Department.

访问控制 / Improper Privilege Management / #890209

厂商: Lark Technologies
严重程度: 低危 · CVSS 4.3
赏金: —
弱点: Improper Privilege Management
研究员: @imran_nisar
披露日期: 2022-10-18
资产: larksuite.com
CVE: —

该报告还没有中文解读。

时间线

2020-06-03报告提交
2022-10-18公开披露

阅读 HackerOne 原文 ↗作者 @imran_nisar · 版权归作者与 Lark Technologies 所有

同类报告

Unauthenticated access to sensitive user informationRazer · — · $500 Re-Sharing allows increase of privilegesNextcloud · 2020-09-28 OneAgent Unprivileged NTLM User CoercionDynatrace · 2025-10-15 · $750 [h1-2102] [Plus] User with Store Management Permission can Make changeDomainEnforcementState - that should be limited to User Management OnlyShopify · 2022-04-21 [H1-2006 2020] Exploiting multiple vulnerabilities to get hacker's payment ensuredh1-ctf · 2020-06-18 No password confirmation required when using apptoken on sensitive endpointNextcloud · 2026-10-27