Slack · Report #130133
Access to some Slack workspace metadata and settings available to unauthorized parties
Validstatus
$7,000bounty
60upvotes
10 Nov 2020disclosed
Summary
In April 2016, @secalert alerted us to a vulnerability which may have allowed access to some Slack workspace metadata and settings to unauthorized parties. We implemented an initial fix within minutes, and a complete fix within two weeks. Nothing further is required from users to be protected.
Thank you to @secalert for finding this!
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.