Access all Private Memos by unauthorized user in usememos/memos
Dec 23rd 2022
After login , I create a new memo and post it then i tried to edit it So in editing POST request you can find the memo id in POST data and in the URL if you change it to any private memo you can access it Also you can change the private memo visibility status and content .
Proof of Concept
Access all private memos and edit them