Slack · Report #746003

DoS on the Direct Messages

Validstatus

mediumseverity

$500bounty

29upvotes

11 Nov 2020disclosed

Summary

In November 2019, @cyanpiny alerted us to a vulnerability that could have allowed an attacker to cause a denial of service for Slack users.

We implemented a fix within weeks, and nothing further is required from users to be protected.

Thank you to @cyanpiny for finding this!

The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original