Skip to content

Possible IDOR in invoice API #119

New issue
New issue
Closed
Closed
Possible IDOR in invoice API#119
Labels
triageAdd to issues that need to be triaged

Description

@hail0hydra
hail0hydra
opened on Jul 15, 2026

Endpoint:

/api/v2/invoice/123

Need:

  • verify horizontal access
  • verify vertical access
  • check mass assignment

Pentester:

Bob

Status:

Testing

Activity

  1. github-actions
    added
    triageAdd to issues that need to be triaged
    on Jul 15, 2026

  2. hail0hydra commented on Jul 15, 2026

    @hail0hydra
    hail0hydra
    on Jul 15, 2026
    Author

    Correct! it exists!

    But it is duplicate

  3. hail0hydra
    closed this as completedon Jul 15, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    triageAdd to issues that need to be triaged

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions