jaas.8x8.vc: Removed users can still have READ/WRITE access to the workspace via different API endpoints

Disclosed: 2023-02-15 06:51:30 By emperor To 8x8-bounty
High
Vulnerability Details
No vulnerability description provided or it is restricted.
Actions
View on HackerOne
Report Stats
  • Report ID: 1479894
  • State: Closed
  • Substate: resolved
  • Upvotes: 19
Share this report