Lucene search

K
hackeroneKauenavarroH1:1880929
HistoryFeb 21, 2023 - 12:47 p.m.

Mozilla Critical Services: Email user account in indexacao waybackurl

2023-02-2112:47:16
kauenavarro
hackerone.com
$1000
21
mozilla
critical
email
indexation
security
user account
archive
data leak
bug bounty

Indexing a large number of user emails on the Internet Archive.

When leaked data, like user email addresses, are found in online search engine cache’s like archive.org, Mozilla rewards bounty hunters who report it in two cases:

  • The volume of leaked data is large enough to warrant us contacting the third party to request the data be deleted.
  • The presence of the leaked data reveals a current flaw in a Mozilla product that is causing the leak.

Outside of these cases, Mozilla doesn’t consider the reports to have security risk and the report will not be eligible for reward.