HackerOne · Report #127914
Deleted name still present via mouseover functionality for user accounts
Validstatus
7upvotes
21 Apr 2016disclosed
How it was found
Hey guys,
So this isn't really a security bug or a big information disclosure. However, I noticed that if a user removes their name "Eric Angeles" from their account page (https://hackerone.com/exodia_forbidden_one) it will still be visible by mousing over the users handle on a disclosed report (https://hackerone.com/reports/124975). So essentially this person has removed their name for whatever reason, winks, their name will still be displayed via this method.