HexBrain

HackerOne · Report #127914

Deleted name still present via mouseover functionality for user accounts

Validstatus
7upvotes
21 Apr 2016disclosed

How it was found

Hey guys,

So this isn't really a security bug or a big information disclosure. However, I noticed that if a user removes their name "Eric Angeles" from their account page (https://hackerone.com/exodia_forbidden_one) it will still be visible by mousing over the users handle on a disclosed report (https://hackerone.com/reports/124975). So essentially this person has removed their name for whatever reason, winks, their name will still be displayed via this method.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original