View Failed Approval and Pending videos other users

Disclosed: 2018-10-21 05:50:04 By tismayil To chaturbate
Low
Vulnerability Details
See videos uploaded by a user. The video is available when it waits for confirmation or is not accepted. ## Steps To Reproduce: 1 - Go victim page : https://chaturbate.com/p/akaxanxa/?tab=bio 2 - Open video : https://chaturbate.com/photo_videos/photo/big/[user_name]/[content_id]/ 3 - Get random requests - https://chaturbate.com/photo_videos/photo/big/[user_name]/[ last content id + 1 ]/ 4 - Done - If the id holds the content opens up as a result. ## Impact By collecting user information, they can access their pending content. I can share content on my site or blog as original content from my own name by playing the contents.
Actions
View on HackerOne
Report Stats
  • Report ID: 411679
  • State: Closed
  • Substate: resolved
  • Upvotes: 27
Share this report