Rockstar Games · Report #197153
Ability to post comments to a crew even after getting kicked out
Validstatus
mediumseverity
$500bounty
6upvotes
8 Aug 2017disclosed
Summary
The researcher found that under certain conditions, Crew members were still able to perform particular actions, such as posting on the Crew wall, even after being kicked from the Crew. Additional verification checks were put in place to prevent this behavior.
TL;DR - Members who got kicked out of the crew, their sessions weren't being invalidated and they still had the old perms
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.