HexBrain

Slack · Report #21248

Content spoofing at Stripe Integrations

Validstatus
$100bounty
2upvotes
25 Aug 2014disclosed

How it was found

I have found Content Spoofing Vulnerable in Slack at Stripe Integrations vulnerability is exploitable to all users

Proof of concept:

https://asdasda.slack.com/services/2481499413?error=content%20spoofing%20!

Regards, Jayson Zabate

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original