HexBrain

Homebrew · Report #221869

Email enumeration of users

Validstatus
mediumseverity
145upvotes
5 Mar 2019disclosed

How it was found

In https://jenkins.brew.sh/user/latish1337/api/xml, I was able to see latish1337 users' email address. Hence, its possible to see the email of all the users listed in the https://jenkins.brew.sh/user/. {F176835}

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original