1 bug, $50,000+ in bounties, how Zendesk intentionally left a backdoor in hundreds of Fortune 500 companies
Submitted 4 weeks ago by ticoombs@reddthat.com to techsploits@reddthat.com
https://gist.github.com/hackermondev/68ec8ed145fcee49d2f5e2b9d2cf2e52
propter_hog@hexbear.net 4 weeks ago
Damn, and I think we use Zendesk at my work. This is the first time I’ve heard of this. Very clever exploit; I never would have guessed there would be anything of value in exploiting a ticketing system.