Cloudflare Public Bug Bounty · Report #1728292
Cloudflare is not properly deleting user's account
Validstatus
mediumseverity
23upvotes
13 Apr 2023disclosed
Summary
A vulnerability was discovered in Cloudflare’s User Deletion process which resulted in the current session not being terminated when a request to delete the user had been submitted. Cloudflare’s Engineering Team have fixed the vulnerability and user sessions are now invalidated once a user account deletion request is received.
..............
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.