LY Corporation · Report #1305432
Bot setting information leakage in OpenChat room
Validstatus
lowseverity
29upvotes
27 Dec 2021disclosed
Summary
Due to the bug in the authority verification process, it could be possible for the non-admin users to see settings details for Line OpenChat Admin Bot, such as saved scheduled messages and auto-responses.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.