X / xAI · Report #201300
Attacker can get vine repost user all informations even Ip address and location .
Validstatus
95upvotes
25 Mar 2017disclosed
Summary
The researcher discovered that an endpoint used for providing information about Vine reposts was unintentionally disclosing the IP address the repost was made from. Upon receiving this report we immediately took steps to correct the issue and updated the misconfigured endpoint the same day the report was triaged. Based on our investigation, we do not believe there was any malicious abuse of the endpoint.
Writeup link on my blog :- https://medium.com/bugbountywriteup/how-i-earned-5040-from-twitter-by-showing-a-way-to-harvest-other-users-ip-address-e9f43c931e9a
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.