HexBrain

Rockstar Games · Report #218898

Table and Column Exposure

Validstatus
lowseverity
$150bounty
18upvotes
10 May 2018disclosed

Summary

In this report, the researcher found an error message on our Careers page that exposed database table names. If an injection vulnerability had also existed there, this information could have helped an attacker carry out attacks.

In response, we cleaned up the error message so that it still gives our developers useful information when thrown, but does not expose sensitive data.

How it was found

The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original