Report title autocompletion

Disclosed: 2015-06-08 00:30:09 By janpaul123 To security
Unknown
Vulnerability Details
Scenario: 1. Researcher uses a shared computer. 2. Researcher submits a report. 3. Researcher logs out. 4. Another person logs in, on another account. 5. Another person submits a report. 6. When entering a title, the title of the previous report submitted by the researcher is shown in autocompletion box. This gives away the title of the bug to other users of the web browser, even though the researcher logged out properly.
Actions
View on HackerOne
Report Stats
  • Report ID: 263
  • State: Closed
  • Substate: resolved
  • Upvotes: 7
Share this report