HackerOne · Report #127235
New hacktivity view discloses report IDs of non-public reports
Validstatus
6upvotes
26 Apr 2016disclosed
Summary
The new hacktivity view unintentionally leaked the report IDs of non-public (undisclosed) reports through react ID's. It has the same root cause as #127620 and was reporter earlier than that, so we decided to award the same bounty.
The new hacktivity view unintentionally leaked the report IDs of non-public (undisclosed) reports through react ID's.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.