1611775 - Information Discloser in https://blog.mozilla.org/

Status: RESOLVED DUPLICATE of bug 1365661

(Websites :: Other, defect)

Description

[dev.ihac]

Attachment: I have attached the screnshoot for reference .

CMS stands for ‘Content Management System’. It allows you to control and manage the content within your website without technical training.
Tools=Mozilla Browser
How I found this Bug I visit the site blog.mozilla.org after visit the site I edit the url as by adding the code "/wp-json/wp/v2/users" is the flaw in Wordpress Blogs earlier.
This is REST API endpoints but is not configured properly here on MOzilla Blog.
The URL's are
https://blog.mozilla.org/wp-json/wp/v2/users
https://blog.mozilla.org/wp-json/wp/v2/pages
https://blog.mozilla.org/wp-json/wp/v2/media

Comment 1

[dev.ihac]

https://blog.mozilla.org/wp-json/wp/v2/comments(In reply to dev.ihac from comment #0)

Created attachment 9123160 [details]
I have attached the screnshoot for reference .

CMS stands for ‘Content Management System’. It allows you to control and manage the content within your website without technical training.
Tools=Mozilla Browser
How I found this Bug I visit the site blog.mozilla.org after visit the site I edit the url as by adding the code "/wp-json/wp/v2/users" is the flaw in Wordpress Blogs earlier.
This is REST API endpoints but is not configured properly here on MOzilla Blog.
The URL's are
https://blog.mozilla.org/wp-json/wp/v2/users
https://blog.mozilla.org/wp-json/wp/v2/pages
https://blog.mozilla.org/wp-json/wp/v2/media
https://blog.mozilla.org/wp-json/wp/v2/comments

Comment 2

[Greg G]

Hi dev.ihac, thanks for the report. This data is public.