HexBrain

Flickr · Report #1916400

High resource consumption by insufficient sanitization of forum threads pagination

Validstatus
mediumseverity
$479bounty
75upvotes
24 Nov 2025disclosed

Summary

On some paginated pages, if a page number was provided in the URL that was larger than the number of pages available, then internal logic would result in an infinite loop generating markup on each pass through the loop. By correcting the logic it was trivial to correct this case and avoid generating links to pages that don't exist.

How it was found

The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original