Homebrew: Email enumeration of users

2017-04-18T12:06:16
ID H1:221869
Type hackerone
Reporter pappan
Modified 2019-03-05T08:20:50

Description

In https://jenkins.brew.sh/user/latish1337/api/xml, I was able to see latish1337 users' email address. Hence, its possible to see the email of all the users listed in the https://jenkins.brew.sh/user/. {F176835}