HackerOne · Report #63729
Logic error with notifications: user that has left team continues to receive notifications and can not 'clean' this area on account
Validstatus
$500bounty
4upvotes
4 Jun 2015disclosed
How it was found
Hello Hackerone team. I realized that I still get notifications of updates to bugs when it was part of a team but I'm not currently access. This causes me to keep getting emails about this report.
Please see the attached images.
If necessary can create a video with POC
Note: the image 5 illustrates that even though I had already left the team'm still seen as part of accessing the report from another account (a current member of the team).