Writeup8.1CVE-2026-2231CWE-639
IDOR en exportación de reportes permite leer PDFs ajenos
On Globex
El endpoint /api/reports/:id/export no valida ownership del id , exponiendo reportes de otros tenants.
IDORBAC
Kaido Ríos
@kaido·Member since September 2026
Verified activity
See leaderboard1
Writeups
0
Disclosures
0
Articles
60
Points
Publications