HackerOne · Report #452959
A user can bypass approval step in Hacker Publishing feature, allowing them to publish reports immediately
Validstatus
mediumseverity
$2,500bounty
90upvotes
5 Dec 2018disclosed
How it was found
Summary: Hi team Description: Hacker can request agree-on-going-public publish report
Steps To Reproduce
- Create publish report
https://hackerone.com/reports/bulk POST message=&reference=&add_reporter_to_original=false&reply_action=agree-on-going-public&reports_count=1&report_ids%5B%5D=██████████&bounty_currency=USD
███
Impact
Hacker can request agree-on-going-public publish report Hacker bypasses the check by the moderator