---
id: 4053
title: "Wodify"
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/wodify-advisory"
published_at: "2021-08-13T00:00:00Z"
tags: ["web-security", "xss", "idor", "vulnerability", "advisory", "wodify"]
phying_url: "https://phying.com/item/4053"
lang: en
---

# Wodify

## Summary

Wodify advisory on three chained flaws: an IDOR exposing all tenants' workout data, stored XSS via tampered data, and sensitive info disclosure; worst case, payment settings could be tampered with.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **Published:** 2021-08-13T00:00:00Z
- **Original:** https://bishopfox.com/blog/wodify-advisory
- **Phying News:** https://phying.com/item/4053