Hiro · Report #268224
Information Disclosure
Informativestatus
mediumseverity
21upvotes
31 Oct 2025disclosed
How it was found
It looks like I can access notification panel of any user.
https://forum.blockstack.org/u/username/notifications
Just change the username with the desired username and you are redirected to their notification panel.