ProConf 6.0 Security Oopsie: IDOR Exploit Lets You Swipe Conference Papers!
ProConf 6.0 suffers from an Insecure Direct Object Reference (IDOR) vulnerability, allowing mischievous authors to snoop on others’ submitted papers by simply tweaking the Paper ID value. Upgrade to version 6.1 if you prefer your secrets to stay secret!
Hot Take:
Just when you thought your conference paper was safe, ProConf decides to play peek-a-boo with your data. Why submit a paper when you can just view everyone else’s with a simple number hack? Move over, Netflix and chill—it’s time for ProConf and snoop!
Key Points:
- ProConf version 6.0 and below suffer from an IDOR vulnerability.
- This flaw allows unauthorized access to other authors’ paper details by manipulating the Paper ID.
- The exploit is as easy as changing a number in a URL.
- The vulnerability exposes sensitive personal information such as names and emails.
- The issue has been patched in version 6.1.
Already a member? Log in here