Slack · Report #148068
Source code leakage through GIT web access at host '52.91.137.42'
Validstatus
26upvotes
15 Aug 2016disclosed
Summary
@d0znpp alerted us to the public availability of Git files on a QA server. This lead to the access to files which should have been restricted. We have enforced proper access control, and Slack awarded @d0znpp a $1,500 bounty for bringing the issue to our attention! Thank you!
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.