Peertube: Security Issue : mails visibility in API

Created on 29 Nov 2017  路  1Comment  路  Source: Chocobozzz/PeerTube

First, thank you to work on this YouTube alternative !

I've started to explore differents entrypoints of the API, and this one seems to have a security issue : https://peertube.cpy.re/api/v1/users

Right now, we can see every mails, of each users. It's a real problem.

Type
Source
picture arthurlacoste

Most helpful comment

Fixed: https://github.com/Chocobozzz/PeerTube/commit/86d13ec2aa94ec10810ddf9c8b33314bd4968791

Thanks for the report

picture Chocobozzz on 29 Nov 2017
🎉2

>All comments

Fixed: https://github.com/Chocobozzz/PeerTube/commit/86d13ec2aa94ec10810ddf9c8b33314bd4968791

Thanks for the report

Chocobozzz picture Chocobozzz on 29 Nov 2017
🎉2
Was this page helpful?
0 / 5 - 0 ratings

Related issues

NoraCodes picture NoraCodes  路  3Comments
tcitworld picture tcitworld  路  3Comments
kabo picture kabo  路  3Comments
milleniumbug picture milleniumbug  路  3Comments
ChameleonScales picture ChameleonScales  路  3Comments