Unauthorized Access to Deleted Interviews on Glassdoor Platform
Low
G
Glassdoor
Submitted None
Team Summary
Official summary from Glassdoor
In the limited case of employer profiles being deleted from our website, deleted Interview records were accessible via an RSS endpoint that has now been deprecated. We thank the researcher for highlighting this finding!
Actions:
Reported by
capablanca0
Report Details
Additional information and metadata
State
Closed
Substate
Resolved
Submitted
Weakness
Insecure Direct Object Reference (IDOR)