Hackers can reveal the names of private programs that have an external link and Enterprise Product Edition

How it was found

Summary:

Hi team,

A few days ago, your engineers revealed a field in the report- Custom fields. The team removed it after a while, but did not remove the design line

Custom fields Available only for Enterprise Product Edition , Therefore, the sandbox program cannot independently accept this version of the product, which means that only a program with an administrator can do this, which means that the program has a private part

Steps To Reproduce:

1. https://hackerone.com/hacktivity/publish 1.1 Input ██████ and create report.

█████

As we can see, there are two dividing lines, between them and there should be (was some time ago) a Custom Fields field.

This means that this program have Enterprise Product Edition , And hence the private part

Impact

Hackers can reveal the names of private programs that have an external link and Enterprise Product Edition