Writeup — Accessing private GraphQL posts

This lab shows a vulnerability in a GraphQL implementation where users can access sensitive fields because the queries are not properly… Continue reading on Medium »