I can access other people's account information through the account links they provide here

IsE
IsE Posts: 109 ✭✭
in Your Fizz Account
Please do not share direct link to your account settings page on this forum. At the end of those links, there is a number and that number is somehow tied to your account: "productId=XXXXXX" (numbers instead of XXX)
I realized I can see someone's phone number, account number and home address.

Answers

  • J D. #792
    J D. #792 Posts: 316 ✭✭
    Good find!! Fizz, if you seeing this please fix the security flaw. Thanks Isa.
  • Whizz
    Whizz Posts: 23,015 admin
    Hello,
    I've just escalated this flaw for further investigation.
    Thank you for bringing this to our attention
    Cheers
    Ionut
  • IsE
    IsE Posts: 109 ✭✭
    Thanks! They did not understand what my concern was on Facebook chat at first when I told them I can see other people's info. Hopefully this will get fixed soon.

Categories