Mapbox · Report #202725
Public access to objects in AWS S3 bucket
Validstatus
mediumseverity
$750bounty
22upvotes
12 Jul 2017disclosed
Summary
On February 1st, 2017, Sahilsaif discovered an S3 bucket belonging to Mapbox which contained publicly accessible objects which should have been private. Using Sahilsaif's report, Mapbox mitigated the report by making the affected objects private.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.