Basecamp · Report #1026196
Information Disclosure of Garbage Collection Cycle 'Again'
Validstatus
lowseverity
$100bounty
41upvotes
16 Dec 2020disclosed
Summary
A diagnostic subdomain was still available publicly after being reported (https://hackerone.com/reports/981796 ) and remediation.
Subsequently a researcher was able to access the subdomain.
Disclosure has been limited as the report contains low sensitive information, but sensitive none the less.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.