Skip to content
The Golden Role How a Simple API Logic Flaw Unlocked an Entire SaaS Platform
labs.cognisys.group | blog | #pentesting | #access-control | #privilege-escalation | #api-security | #saas | #black-box | #multi-tenant
Summary
A black-box assessment of a multi-tenant SaaS platform: an open registration flow and a weak role-assignment API let testers escalate privileges, break tenant isolation and reach sensitive data.
- Published
- Collected