Logistics Leak

Author

Hassan Ahmed Malik

Room overview

Investigate a multi-tenant vendor shipment portal where an authenticated vendor can read another company's shipment details via a Broken Object Level Authorization (BOLA/IDOR) flaw, and reach an internal manifest export missing an administrator role check.

Logistics Leak

medium · Web · Hands On