Closed
Bug 1469007
Opened 8 years ago
Closed 8 years ago
Results at google
Categories
(Websites :: other.mozilla.org, defect)
Tracking
(Not tracked)
RESOLVED
INVALID
People
(Reporter: pablosopel2, Unassigned)
Details
User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.87 Safari/537.36
Steps to reproduce:
Found at https://niebezpiecznik.pl/post/a-tak-mozna-bylo-zhackowac-radio-maryja/ old tip how to search for some bugs "filetype:txt password"
Typed at google
"filetype:txt wazne twitter"
Changed way how google is searching to "exact"
Foind this page
https://mail.mozilla.org/pipermail/community-poland/2014.txt
changed url to
mail.mozilla.org/pipermail/
Actual results:
I received access to content to which I should not have access, and I am able to browse freely your discussions and reports what you geting there.
Expected results:
I should not be able to see this website ? :)
Hi Paweł, thanks for the report! This is a public mailing list, so anyone should be able to see the site.
You can sign up for community-poland and other lists at: https://mail.mozilla.org/listinfo
Group: websites-security
Status: UNCONFIRMED → RESOLVED
Closed: 8 years ago
Resolution: --- → INVALID
Updated•8 years ago
|
Component: General → other.mozilla.org
Product: www.mozilla.org → Websites
You need to log in
before you can comment on or make changes to this bug.
Description
•