Mail.ru: API method at api.my.games allows to enumerate user emails

2019-12-14T07:52:53
ID H1:758401
Type hackerone
Reporter mobius07
Modified 2020-01-14T12:09:59

Description

API method which allowed to enumerate emails at https://api.my.games/ was not sufficiently protected.