Arbitrary write in the application’s data folder and arbitrary read of server’s replies from 3rd party apps.

Posted on June 8, 2023by bugbounty

Basecamp disclosed a bug submitted by fr4via: https://hackerone.com/reports/1710541 – Bounty: $1000