HexBrain

HackerOne · Report #3113398

Internal Access to Hackerone confluence Docs

Validstatus
highseverity
$12,500bounty
227upvotes
15 Aug 2025disclosed

Summary

This vulnerability allowed external access to HackerOne's internal Confluence documentation through a support system misconfiguration. The impact included:

  • Access to internal documentation that wasn't intended for public viewing
  • The ability to view and modify limited content within the Confluence instance

This configuration issue demonstrated how support system workflows could be leveraged to gain unauthorized access to internal resources.

How it was found

The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original