Slack · Report #239623
Many Slack teams can be joined by abusing an improperly configured support@ inbox
Validstatus
88upvotes
21 Oct 2017disclosed
Summary
@securinti informed us of support portals configured in manners which allowed for abuse. This is not an issue with Slack itself, but we were able to make a change to help mitigate this for such insecure configurations. Thank you!
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.