Disclosure of sensitive documents

Disclosed by

Engagement National Aeronautics and Space Administration (NASA) - Vulnerability Disclosure Program
Disclosed date 17 Nov 2025 7 months ago
Priority P3 Bugcrowd's VRT priority rating
Status Resolved This vulnerability has been accepted and fixed

Summary by shrutiypatil

I discovered a sensitive data exposure in nasa subdomain where a direct URL like [redacted]/downloadFile/1270 allowed anyone to grab a confidential PDF file, no login required. This P3 vulnerability issue spilled internal docs, risking breaches of policies or PII.

Disclosure of sensitive documents

Summary by shrutiypatil

Activity