🎯 New Report #3025797: [Privilege Escalation User can Pin|Unpin Any Comment on Any Project or Locale](https://hackerone.com/reports/3025797)
🔺Severity: Low
👽 Reporter: adilnbabras
⭐️ Reputation: 268
🛠 State: resolved
💼 Team: Mozilla
💵 Bounty: null
🕐 Submitted: 2025-03-07
⏰ Disclosed: 2026-03-20 11:00:15
📝 Summary: A vulnerability was discovered in the Pontoon application where any user could pin or unpin comments on any project or locale, despite lacking the necessary privileges. This was possible due to the lack of proper access controls in the backend code handling the pin and unpin functionality.
📂 Report JSON File: 3025797
@hackeronereports