Snooping into messages via email service

Summary

@uranium238 discovered a vulnerability with a 3rd party email integration provider which would allow messages in Slack email integrations to be leaked. We worked with the 3rd party to get this issue resolved, and performed a thorough investigation to confirm that this had never been exploited. Thanks @uranium238 for an interesting finding!

Slack's overall response was extremely satisfying. From triage to resolve it was great to see the care and respect Slack has for reporters. It was great to work with them in fixing this vulnerability. 10/10 would research on Slack again.

Blog post : http://blog.pentestnepal.tech/post/150381068912/how-i-snooped-into-your-private-slack-messages