Web Hack List

Collected research

Hacking CloudKit - How I accidentally deleted your Apple Shortcuts

Apple's CloudKit datastore exposes public-scope containers whose access controls Apple's own apps misconfigured, and because several CloudKit API endpoints authenticate differently, an ordinary iCloud user could reach those containers through a different endpoint and create or delete records.

Record

Researcher
Frans Rosén
Published by
Labs Detectify
Date
Topic
Server

In the archive

Tags

This page is the archive's own catalogue record. The research is the work of Frans Rosén, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .