HexBrain

HackerOne · Report #412988

Hacker can request mediation for published reports

Validstatus
lowseverity
$500bounty
23upvotes
27 Nov 2018disclosed

How it was found

Hi team, @jobert

Summary: After creating the publish report, we do not have a field to send the requested meditation from HackerOne Support

Description:

Steps To Reproduce

  1. Create publish report for any program ████████

  2. Use query https://hackerone.com/reports/number_publish_report/hacker_help

My https://hackerone.com/reports/███/hacker_help POST: message=123&mediation_type=unresponsive

  1. Next check report

███

I understand the degree of low, but this is a disagreement between the web and the end point.

Sorry i bad speak english I hope you understand me Thank you,haxta4ok00

Impact

Creating a query requested meditation from HackerOne Support without being able to do so

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original