Bugzilla

Hello Dylan,

I read your report again and I think I now understand what's going, so no need to send us the steps to reproduce.

You were able to join the group https://phabricator.services.mozilla.com/tag/mozilla-phabricator-emails/. Based on the group description:
>this group allows access the custom Mozilla email endpoints.
>Users who are part of this group will be able to see users' email addresses via the email endpoints.

This allowed access to information related to secure revisions.

The team have locked access to the group and will be auditing other groups to check for similar misconfiguration.

Thanks,
Frida

Hello Dylan,

I read your report again and I think I now understand what's going, so no need to send us the steps to reproduce.

You were able to join the group https://phabricator.services.mozilla.com/tag/mozilla-phabricator-emails/. Based on the group description, the group:
>Allows access to the custom Mozilla email endpoints.
>Users who are part of this group will be able to see users' email addresses via the email endpoints.

This allowed access to information related to secure revisions.

The team have locked access to the group and will be auditing other groups to check for similar misconfiguration.

Thanks,
Frida