HexBrain

Liberapay · Report #362718

Returning back from the browser after logging off will disclose some information

N/Astatus
1upvotes
7 Jun 2018disclosed

How it was found

Summary :

Hi, I found an issue that is after signing out from the account and click back button continuously from the browser it will disclose sensitive information in all pages that the user open it when he is using his account like for example identity page . I believe that this issue may imply a minor threat as it is demand a shared computer but i also love to make open source community a better place!. thx

Impact

Disclose sensitive information like the identity page

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original