connect.8×8.com: Users with no permission can track/access restricted details/data via GET /api/v2/support/requests/HTTP/2

Posted on February 16, 2023by bugbounty

8×8 Bounty disclosed a bug submitted by emperor: https://hackerone.com/reports/1499114 – Bounty: $777