Notion Email Leak: Public Pages Expose Editor Addresses to Anyone
One unauthenticated API call on any public Notion page returns the name, photo, and email of every editor. The HackerOne report sat open for four years.
One unauthenticated API call on any public Notion page returns the name, photo, and email of every editor. The HackerOne report sat open for four years.