HexBrain

HackerOne · Report #29185

"early preview" programs disclosure

Informativestatus
9upvotes
21 Jan 2015disclosed

How it was found

Hi,

There is a really small issue, but I think it should be fixed.

If you open https://hackerone.com/facebook as guest user (not logged), you will be redirected to https://hackerone.com/users/sign_in, so it shows that facebook page exists and it's private.

Correct redirection should be to #404 page like eg. https://hackerone.com/privateprogram

Cheers, Kacper.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original