The platform did not specify whether the categories overlapped. The attacker created a Brevo account, enabled single sign-on and invited legitimate Brevo users into the configuration.
The attacker created a Brevo account, enabled single sign-on and invited legitimate Brevo users into the configuration.
Brevo said access should have been confined to that organization, but an authorization boundary failed and granted access to every organization the invited users could reach.
The platform did not specify whether the categories overlapped.
The page is ready to read now. The fuller skim-friendly version will appear here automatically.
The attacker created a Brevo account, enabled single sign-on and invited legitimate Brevo users into the configuration. Brevo said access should have been confined to that organization, but an authorization boundary failed and granted access to every organization the invited users could reach. The platform did not specify whether the categories overlapped.
The platform did not specify whether the categories overlapped.
Open the app view to save this story, compare related coverage, and continue from the same source.