u/TerryBB73

Hi everyone, I wanted to ask about your personal experience with one particular topic: reports about Information Disclosure.

I’m not talking about things like exposing a user’s personal data. I mean server-side errors that reveal hidden endpoints, server logic, internal infrastructure structure, and things like that.

Have you ever had a report accepted where you had exactly this kind of information in your hands? What kind of information was it, and was it enough on its own for the report to be accepted?