HackerOne · Report #3113398
Internal Access to Hackerone confluence Docs
Validstatus
highseverity
$12,500bounty
227upvotes
15 Aug 2025disclosed
Summary
This vulnerability allowed external access to HackerOne's internal Confluence documentation through a support system misconfiguration. The impact included:
- Access to internal documentation that wasn't intended for public viewing
- The ability to view and modify limited content within the Confluence instance
This configuration issue demonstrated how support system workflows could be leveraged to gain unauthorized access to internal resources.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.