4 ms·
Someone reported this same vulnerability to us via HackerOne months ago. We worked with Sendgrid support to re-claim the domain and they said they were urgently
by mikesea 10y ago
Someone reported this same vulnerability to us via HackerOne months ago. We worked with Sendgrid support to re-claim the domain and they said they were urgently working to fix the issue, or not.
Edit: just saw this post was from September. Author probably made thousands in rewards circulating this vulnerability.
- innoying 10y agoI do not believe the author circulated this report to multiple companies, however once it was made public a number of other reporters in the community did and continued to iterate on it until SendGrid fixed the issues. Source: I am a member of said community: https://bugcrowd.com/bored-engineer https://bugcrowd.com/bored-engineer, https://hackerone.com/bored-engineer https://hackerone.com/bored-engineer, etc