pentester.land· Mar 4, 2024· by Roni Carta (@0xLupin)💰 Bounty: 50,000

We Hacked Google A.I. for $50,000

Open Original Article ↗
Target Program: Google
🎯 Vulnerability: Insecure Direct Object Reference (IDOR)
💡 Defense Fix: Enforce object-level access control checks (ABAC/RBAC) on the server side for every API request.
#LLM#AI#GraphQL#DoS#IDOR#CSP bypass