Email enumeration of users
Medium
H
Homebrew
Submitted None
Actions:
Reported by
pappan
Vulnerability Details
Technical details and impact analysis
In https://jenkins.brew.sh/user/latish1337/api/xml, I was able to see latish1337 users' email address.
Hence, its possible to see the email of all the users listed in the https://jenkins.brew.sh/user/.
{F176835}
Report Details
Additional information and metadata
State
Closed
Substate
Resolved
Submitted
Weakness
Information Disclosure