🎯 New Report #3353000: Privilege Escalation – Access to the Alert Subscribers page for users with low privileges
🔺Severity: Low
👽 Reporter: bl4ck-
⭐️ Reputation: 907
🛠 State: resolved
💼 Team: SingleStore
💵 Bounty: null
🕐 Submitted: 2025-09-22
⏰ Disclosed: 2026-07-01 17:36:56
📝 Summary: A privilege escalation vulnerability was discovered in the SingleStore Helios alert management system. The vulnerability allowed users with low privileges to access the Alert Subscribers API endpoint and retrieve email addresses and alert severity level preferences of notification subscribers, despite lacking authorization to view this information.
📂 Report JSON File: 3353000
@hackeronereports