Chaturbate · Report #386351
Users may still able to view chat room panel of password protected rooms
Validstatus
mediumseverity
13upvotes
20 Sept 2018disclosed
Summary
The hacker found that the chat room panel could be accessed without the user having the room password. This was resolved.
An attacker may able to view a password protected chat room panel by requesting the api endpoint for room panel.
It discloses information depends on what app they use.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.