Slack · Report #169992
Email information leakage for certain addresses
Validstatus
$400bounty
5upvotes
31 Oct 2016disclosed
Summary
@procode701 discovered a bug related to a specific configuration with our third-party email infrastructure provider, which had the potential to leak certain information from email on non-product Slack domains for specific addresses. Slack applied a fix to the configuration and performed a thorough investigation around vulnerability scope and activity. Thanks @procode701!
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.