HexBrain

Algolia · Report #739251

Information disclosure via a misconfigured third-party product

Validstatus
highseverity
156upvotes
3 Mar 2021disclosed

Summary

The researcher identified a misconfiguration in a third party product that could have been used to retrieve information about Algolia users. We fixed the issue and worked with the provider of the third party product who confirmed that this vulnerability had not been exploited.

Disclosure of all Algolia users information, like email, phone ...etc

How it was found

The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original