Reverb.com · Report #352623
Api token exposed in Reverb.com's public github repository
Validstatus
mediumseverity
7upvotes
16 May 2018disclosed
Summary
An access token of a user account was available in a public github repo. The token was tied to an experimental project, and the account was only used for that project, so no sensitive information was able to be obtained.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.