P2 (High) - PII Data via Old File
Bug Bounty Review
Bug Bounty
PII Data via Old File
Rootbakar
Review Bug Bounty
Data Exposed
SCOPE
The domain that became the scope of my findings this time is www.redacted.com.
BUG
There is sensitive information in the file with the extension .pdf and contains data such as FULL NAME, NO. Handphone and ADDRESS.
NOTES
The file that I found on this website is a collection of old files that turns out to store sensitive information. This time I was given a severity of 7.5 (high).
For the path where this file I found is at the url https://www.redacted.com/sites/defaul...
TIPS
Always check the possibility of old files stored on the website and containing sensitive or confidential information.
You can use google dorking which is site:'redacted.com' .pdf or site:'redacted.com' 'confidential' .pdf
REWARDS
For this finding I was given a reward of $800.