Homebrew · Report #221869
Email enumeration of users
Validstatus
mediumseverity
145upvotes
5 Mar 2019disclosed
How it was found
In https://jenkins.brew.sh/user/latish1337/api/xml, I was able to see latish1337 users' email address. Hence, its possible to see the email of all the users listed in the https://jenkins.brew.sh/user/. {F176835}