HexBrain

Rockstar Games · Report #197153

Ability to post comments to a crew even after getting kicked out

Validstatus
mediumseverity
$500bounty
6upvotes
8 Aug 2017disclosed

Summary

The researcher found that under certain conditions, Crew members were still able to perform particular actions, such as posting on the Crew wall, even after being kicked from the Crew. Additional verification checks were put in place to prevent this behavior.

TL;DR - Members who got kicked out of the crew, their sessions weren't being invalidated and they still had the old perms

How it was found

The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original