Mozilla · Report #1880929
Email user account in indexacao waybackurl
Validstatus
mediumseverity
$1,000bounty
18upvotes
5 Apr 2023disclosed
Summary
Indexing a large number of user emails on the Internet Archive in Mozilla accounts service, accounts.firefox.com.
When leaked data, like user email addresses, are found in online search engine cache's like archive.org, Mozilla rewards bounty hunters who report it in two cases:
- The volume of leaked data is large enough to warrant us contacting the third party to request the data be deleted.
- The presence of the leaked data reveals a current flaw in a Mozilla product that is causing the leak.
Outside of these cases, Mozilla doesn't consider the reports to have security risk and the report will not be eligible for reward.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.