Chaturbate · Report #403603
Private and group tokens per minute endpoint active for disabled users
Validstatus
lowseverity
$150bounty
11upvotes
27 Sept 2018disclosed
Summary
The hacker found that the private and group show rate endpoints where still active when an account was disabled. This was resolved. The endpoints only disclosed the rate for these shows.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.