Team object in GraphQL disclosed total number of whitelisted hackers
Medium
Vulnerability Details
**Summary:**
Hi team. Whitelisted_hackers i think your setup - `Two-factor authentication and IP whitelisting are available to further restrict access to accounts.`
**Description:**
Again, because of the link error, I can see the number, but I can't see these links. Analogue #310946
### Steps To Reproduce
1. {"query": "query {team(handle:\\\"security\\\"){id,name,handle,whitelisted_hackers{total_count}}}"}
Result:
`{"data":{"team":{"id":"Z2lkOi8vaGFja2Vyb25lL1RlYW0vMTM=","name":"HackerOne","handle":"security",
"whitelisted_hackers":{"total_count":30}}}}`
* whitelisted_hackers":{"total_count":30} - You have 30 members for 2FA and white IP
Sorry i bad speak english
I hope you understand me
Thank you,haxta4ok00
PS. I'm glad you accept reports in other languages, but I'm used to this format
## Impact
Disclosure count "whitelisted_hackers"
Actions
View on HackerOneReport Stats
- Report ID: 342978
- State: Closed
- Substate: resolved
- Upvotes: 86