Loading HuntDB...

TeamProfile exposes partially sensitive information through GraphQL

Low
H
HackerOne
Submitted None
Reported by 0619

Vulnerability Details

Technical details and impact analysis

Information Disclosure
I noticed there is new field `team_profile` added and using the graphql below the latest serious report and reports received in three months were exposed `{"query":"query Dashboard_report_severity_breakdown_table($first_0:Int!) {\n query {\n id,\n ...F0\n }\n}\nfragment F0 on Query {\n _team4g1Zqs:team(handle:\"security\") {\n _structured_scopes3TsuIg:structured_scopes(first:$first_0) {\n edges {\n node {\n _id,\n asset_identifier,\n reports {\n total_count,\n count_by_severity\n },\n id\n },\n cursor\n },\n pageInfo {\n hasNextPage,\n hasPreviousPage\n }\n },\n _reports42Gng6:reports(without_scope:true) {\n total_count,\n count_by_severity\n },\n team_profile{_id,disclosed_reports_in_last_year_count,latest_report_created_at,latest_serious_report_created_at,reports_received_in_three_months_count}, _id, id\n },\n id\n}","variables":{"first_0":100}}` If this is public information i can close this by myself (my reputation is very low) but i think it's not and worth to report it ## Impact Information disclosure of no of reports received in 3 months time and other information not in the current UI

Report Details

Additional information and metadata

State

Closed

Substate

Resolved

Submitted

Weakness

Information Disclosure