HexBrain

Yelp · Report #935573

JDBC credentials leaked via github

Informativestatus
3upvotes
27 Jul 2020disclosed

How it was found

Summary:

jdbc credentials found on a public github repo.though the repo belongs to yelp or not there is a doubt.I have found many more sensitive data on that repo.so kindly check the repo all together.sensitive data found publicly.

Platform(s) Affected:

website

Steps To Reproduce:

  1. visit the link

you will see leaked credentials.also visit other path to discover more sensitive info.

Impact

private credentials disclosure.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original