TGViewer
Hackerone Reports Hackerone Reports @hackeronereports · 242 subscribers
Post #899 51
🎯 New Report #3858504: connect.8x8.com: Automation Builder - Input Validation Issue in Workflow Step Outputs
🔺Severity: High
👽 Reporter: kyotozzx
⭐️ Reputation: 351
🛠 State: resolved
💼 Team: 8x8
💵 Bounty: 1337
🕐 Submitted: 2026-07-12
⏰ Disclosed: 2026-09-02 00:03:45
📝 Summary: An input validation issue was reported in the 8x8 Connect Automation Builder's API where workflow step output field names were not validated against reserved context variable names. The issue was addressed by implementing validation to reject reserved field names at workflow creation.
📂 Report JSON File: 3858504
@hackeronereports
More from @hackeronereports
  1. Oct 15, 2026🎯 New Report #3972558: Burp Suite OpenAPI Event Log HTML injection triggers Windows SMB a…
  2. Oct 15, 2026🎯 New Report #3938927: An organization admin can create an attacker-controlled organizati…
  3. Oct 15, 2026🎯 New Report #3770768: [Switch Remote stack buffer overflow in the LDN/LP2P DHCP server l…
  4. Oct 14, 2026🎯 New Report #4071064: Unauthenticated self-registration on ████████ grants full access t…
  5. Oct 14, 2026🎯 New Report #4022462: Uncaught RecursionError crash in translation-finder (deep director…
  6. Oct 14, 2026🎯 New Report #3988961: Stored XSS on the public Pontoon dashboards: the latest-activity t…
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →