Collected research
All Your Google Docs are Belong To US...
Billy (BK) Rios » All Your Google Docs are Belong To US…
A Google Docs session-management flaw: GET /Dialogs/EmailDocument never checked whether the caller owned the requested DocID, and a follow-up POST to /MiscCommands with a swapped docid emailed any user's document to an attacker address. Rios also shows the DocID suffix increments in rapid succession, making enumeration practical.
Record
- Document
- Billy (BK) Rios » All Your Google Docs are Belong To US…
- Researcher
- Billy Rios
- Published by
- xs-sniper.com
- Topic
- Other
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of Billy Rios, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .