? Unauthenticated Admin Profile Disclosure via GraphQL IDOR — A Real-World Bug Bounty Find.

? Unauthenticated Admin Profile Disclosure via GraphQL IDOR — A Real-World Bug Bounty Find.

a year ago
Anonymous $Ih1HCpClO1

? Unauthenticated Admin Profile Disclosure via GraphQL IDOR — A Real-World Bug Bounty Find.

Apr 3, 2025, 3:22am UTC
https://medium.com/@yasser0hamoda1/unauthenticated-admin-profile-disclosure-via-graphql-idor-a-real-world-bug-bounty-find-f8647eae5237