Chaturbate: View Failed Approval and Pending videos other users

ID H1:411679
Type hackerone
Reporter tismayil
Modified 2018-10-21T05:50:04


See videos uploaded by a user. The video is available when it waits for confirmation or is not accepted.

Steps To Reproduce:

1 - Go victim page : 2 - Open video :[user_name]/[content_id]/

3 - Get random requests -[user_name]/[ last content id + 1 ]/

4 - Done - If the id holds the content opens up as a result.


By collecting user information, they can access their pending content. I can share content on my site or blog as original content from my own name by playing the contents.