Dropcontact · Report #963352
Sensitive Information Disclosure
Validstatus
criticalseverity
47upvotes
21 Aug 2020disclosed
Summary
we were displaying sensitive information.
While testing the site i was able to disclose sensitive information such as username, passwords, api keys, etc due to DEBUG = True .This bug arose due to default configuration at the backend. Now the bug is fixed. Thanks to the team for the quick fix!
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.