HexBrain

HackerOne · Report #177484

Information disclosure via policy update notifications after removal from program

Validstatus
lowseverity
9upvotes
29 Oct 2016disclosed

How it was found

Summary:

information disclosure after removed from any program

Description (Include Impact):

after subscribing to changes for any program ( Notify me of changes ) then when the program removed you ,

you could still recieve the changes notification

Steps To Reproduce

  1. i have subscribed for Mindoktor ( Notify me of changes )
  2. yesterday Mindoktor went from public to private
  3. even though i was not there in program ,

i have received the notification of their policy changes

Hope you would fix this

Thanks

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original