HackerOne · Report #177484
Information disclosure via policy update notifications after removal from program
Validstatus
lowseverity
9upvotes
29 Oct 2016disclosed
How it was found
Summary:
information disclosure after removed from any program
Description (Include Impact):
after subscribing to changes for any program ( Notify me of changes ) then when the program removed you ,
you could still recieve the changes notification
Steps To Reproduce
- i have subscribed for Mindoktor ( Notify me of changes )
- yesterday Mindoktor went from public to private
- even though i was not there in program ,
i have received the notification of their policy changes
Hope you would fix this
Thanks