Kubernetes · Report #774872

Configuartion [Sensitive] Information Disclosure

Informativestatus

1upvotes

22 Oct 2020disclosed

How it was found

Report Submission Form

Hello Team,

The Configuration Details are being leaked by the following url: https://prow.k8s.io/config

Click on the Below link to reproduce the issue - https://prow.k8s.io/config

The Sensitive Information is being leaked. This information can be used to launch further attacks.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original