Flickr · Report #1916400
High resource consumption by insufficient sanitization of forum threads pagination
Validstatus
mediumseverity
$479bounty
75upvotes
24 Nov 2025disclosed
Summary
On some paginated pages, if a page number was provided in the URL that was larger than the number of pages available, then internal logic would result in an infinite loop generating markup on each pass through the loop. By correcting the logic it was trivial to correct this case and avoid generating links to pages that don't exist.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.