© 2026 Hashnode
Overview During a security assessment of a widely-used customer support platform (which shall remain unnamed due to disclosure policies), I discovered a critical business logic vulnerability in the agent invitation API. By manipulating a single param...
