HexBrain

X / xAI · Report #1015373

The Deleted Polls is Still Accessable after 30 Days

Validstatus
highseverity
$560bounty
28upvotes
13 Feb 2023disclosed

Summary

The researcher demonstrated a vulnerability that makes it possible for Twitter users to access a Poll after it has been deleted by user that originally posted the Poll. Though it was not visible or accessible via the user interface, it could still be accessed for an extended period of time beyond what the Twitter policy states. This behavior made it possible to compromise the privacy of the user's account that originally posted the Poll if the content was not deleted within a specified amount of time.

How it was found

The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original