Confused Deputy Vulnerability in Cloudflare CASB
On April 18, 2023, I discovered a vulnerability in Cloudflare CASB that enabled me to view sensitive information about other customers’ Microsoft and GitHub organizations. This included employee names/emails, links to SharePoint files, repository names/descriptions and more. View the report on HackerOne. What is Cloudflare CASB? I think I have to quickly explain Cloudflare CASB for the rest…