Cloud object-storage misconfiguration

When it applies

The app stores files in S3/GCS/Azure Blob and the bucket's ACL/policy is too open — public listing, public read of private objects, or (worst) unauthenticated write.

Why it works

Object-storage ACLs are easy to get wrong: "public" gets applied at the bucket level, or an IAM policy grants s3:ListBucket/GetObject/PutObject to *. Predictable names (companyname-backups, -assets, -dev) make discovery trivial.