Raindrop.io
Create
Log in
Sign up
Home
Feedback
Bug report
447
Voters
Amy Mizzi
J
Jani Jež
Powered by Canny
2
Cross-account access: Any user can access collections from others
J
Jani Jež
By changing the URL with an existing id (marked as :id in
https://app.raindrop.io/my/:id
) any user can access any collection.
This issue raises a major privacy concern.
September 26, 2022
Powered by Canny