Confirmation page reveals other users data

VERIFIED DUPLICATE of bug 344834

Status

--
critical
VERIFIED DUPLICATE of bug 344834
12 years ago
12 years ago

People

(Reporter: bugzilla1, Unassigned)

Tracking

Details

(URL)

(Reporter)

Description

12 years ago
Steps to reproduce.

1) goto http://www.worldfirefoxday.com
2) fill in the boxes on the right hand side of the page (2xnames, 2xemails, 1xcaptcha)
3) Submit the form

Result: Get a confirmation/summary page displaying the information submitted by another user (name of someone else's friend, *email address* of a another Firefox fan. THIS IS BAD!

Expected result: Confirmation page using information I've just submitted, and not that of a random 3rd party, in violation of user privacy (and the site's privacy policy!)

*** This bug has been marked as a duplicate of 344834 ***
Status: NEW → RESOLVED
Last Resolved: 12 years ago
Resolution: --- → DUPLICATE
since bug 344834 is now public, this can be too
Group: security
Status: RESOLVED → VERIFIED
You need to log in before you can comment on or make changes to this bug.