Enumerate all the class codes via google dorking

Disclosed: 2021-07-22 01:44:36 By renganathan To khanacademy
High
Vulnerability Details
I used this particular google dork `site:khanacademy.org/join/*` to enumerate all the links of joining classes. 1. Go to google and use the above query to enumerate all of them. 2. Create the student account by filling all the required details 3. Now you're in the class without being actually invited by the teacher Attached POC: ████████ ## Impact An attacker can enumerate all the classes and join in them and make chaos there are chances of IDOR too... a class code can look like `a57d5d5548f302ef4a` instead of `A45JST`
Actions
View on HackerOne
Report Stats
  • Report ID: 1210043
  • State: Closed
  • Substate: resolved
  • Upvotes: 41
Share this report