Disclosing a private program in an external link if program is paused
Low
H
HackerOne
Submitted None
Actions:
Reported by
haxta4ok00
Vulnerability Details
Technical details and impact analysis
**Summary:**
Hi team
**Description:**
If the program is paused that we will not be able to send reports to this program and if we try to directly contact the link https://hackerone.com/external_programm_paused/reports/new we will be returned to the main page https://hackerone.com/external_programm_paused
### Steps To Reproduce
1. PoC ██████████ , ███████
2.
███████
█████
3. After i will be redirect in main page ████████ and ███████████
Result : ████████, █████████ - private program and status - paused
As it seems to me here insufficient check of authorization of me to these programs at this point
I tested on the second account where there is no program.
Sorry i bad speak english
I hope you understand me
Thank you,haxta4ok00
## Impact
Disclosing a private program in an external link if program is paused
Report Details
Additional information and metadata
State
Closed
Substate
Resolved
Bounty
$500.00