Shopify · Report #57505
amazon aws s3 bucket content is public :- http://shopify.com.s3.amazonaws.com/
Validstatus
12upvotes
15 Oct 2015disclosed
Summary
An Amazon S3 bucket (http://shopify.com.s3.amazonaws.com/) was unintentionally left with directory listing enabled. Even though the files in the bucket were all publicly accessible, it was not intended for the directory listing to be visible.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.