Discourse · Report #192611
Users can bookmark other user's messages
Validstatus
mediumseverity
7upvotes
10 Jan 2017disclosed
Summary
If you could guess a personal message post ID, you could bookmark it via a specially formatted URL and see the first 200 chars of the personal message in your bookmarks.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.