Wodify
Summary
Wodify advisory on three chained flaws: an IDOR exposing all tenants' workout data, stored XSS via tampered data, and sensitive info disclosure; worst case, payment settings could be tampered with.
- Published
- Collected
--- id: 4053 title: "Wodify" source_domain: bishopfox.com source_url: "https://bishopfox.com/blog/wodify-advisory" published_at: "2021-08-13T00:00:00Z" tags: ["web-security", "xss", "idor", "vulnerability", "advisory", "wodify"] phying_url: "https://phying.com/item/4053" lang: en --- # Wodify ## Summary Wodify advisory on three chained flaws: an IDOR exposing all tenants' workout data, stored XSS via tampered data, and sensitive info disclosure; worst case, payment settings could be tampered with. ## Intelligence Metadata - **Sources:** bishopfox.com - **Published:** 2021-08-13T00:00:00Z - **Original:** https://bishopfox.com/blog/wodify-advisory - **Phying News:** https://phying.com/item/4053