🤓Information Disclosure
Information Disclosure
There is not much to explain in vulnerability It simply allows unauthorized user to access sensitive information of the application.
information disclosure can be find by looking at the introspection query's output , error field suggestion and much more.
Example :
query {
user(id: "123") {
id
username
email
password # Sensitive information disclosed
token # Sensitive information disclosed
}
}
H1 reports
Last updated