CoreEvent GraphQL API – BOLA/IDOR exposing 10k+ records (PII, ticket QR codes) via unauthenticated queries

Закрепи.sender (@heartysender), May 29, 2026, 01:21 UTC

CoreEvent GraphQL API – BOLA/IDOR exposing 10k+ records (PII, ticket QR codes) via unauthenticated queries https://parl0v.github.io/vulnerabilities/writeups/coreevent/ Submitted May 29, 2026 at 06:12AM by Jipp2109 via reddit https://ift.tt/2eqUtzB

The excerpt is quoted from a public Telegram channel, which owns its text.

Read the original post on Telegram

More posts from Закрепи.sender · All channels