CYBERSECURITY
FEATURED ANALYSIS
The Red Agent POV: Exploiting Broken Object-Level Authorization in an Airline GraphQL API
BY
Gal Nagli
SOURCE
Wiz Blog | RSS feed
DATE
READ
1 min read
Part 2: How the Red Agent bypassed backend resolvers to expose an entire airline booking database in fifteen minutes
Part 2: How the Red Agent bypassed backend resolvers to expose an entire airline booking database in fifteen minutes