Algolia · Report #739251
Information disclosure via a misconfigured third-party product
Validstatus
highseverity
156upvotes
3 Mar 2021disclosed
Summary
The researcher identified a misconfiguration in a third party product that could have been used to retrieve information about Algolia users. We fixed the issue and worked with the provider of the third party product who confirmed that this vulnerability had not been exploited.
Disclosure of all Algolia users information, like email, phone ...etc
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.