HexBrain

Mozilla · Report #1880929

Email user account in indexacao waybackurl

Validstatus
mediumseverity
$1,000bounty
18upvotes
5 Apr 2023disclosed

Summary

Indexing a large number of user emails on the Internet Archive in Mozilla accounts service, accounts.firefox.com.

When leaked data, like user email addresses, are found in online search engine cache's like archive.org, Mozilla rewards bounty hunters who report it in two cases:

  • The volume of leaked data is large enough to warrant us contacting the third party to request the data be deleted.
  • The presence of the leaked data reveals a current flaw in a Mozilla product that is causing the leak.

Outside of these cases, Mozilla doesn't consider the reports to have security risk and the report will not be eligible for reward.

How it was found

The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original