HexBrain

HackerOne · Report #63729

Logic error with notifications: user that has left team continues to receive notifications and can not 'clean' this area on account

Validstatus
$500bounty
4upvotes
4 Jun 2015disclosed

How it was found

Hello Hackerone team. I realized that I still get notifications of updates to bugs when it was part of a team but I'm not currently access. This causes me to keep getting emails about this report.

Please see the attached images.

If necessary can create a video with POC

Note: the image 5 illustrates that even though I had already left the team'm still seen as part of accessing the report from another account (a current member of the team).

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original