8x8 · Report #772778
Disclosure of Users Information On Wordpress Api [https://jitsi.org/]
Validstatus
lowseverity
9upvotes
23 Jan 2020disclosed
Summary
Jitsi was running a default WordPress site that had not yet been hardened to prevent user enumeration via the API.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.