Elastic · Report #1266188

Critical || Unrestricted access to private Github repos and properties of Elastic through leaked token of Elastic employee

Validstatus

criticalseverity

64upvotes

1 Sept 2021disclosed

Summary

@prateek_0490 was able to gain access to private Github repositories through a leaked Github token on bitbucket. We confirmed this token was valid, and have rotated.

How it was found

The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original