HackerOne · Report #280
Real impersonation
Validstatus
48upvotes
30 Nov 2013disclosed
How it was found
When you view merijn.html his profile shows the profile page of the merijn user although the former is a completely different user. This way users can potentially impersonate other users.