After the upload of an private file, using transformations, the file becomes public without the possibility of changing it.

Posted on October 21, 2023by bugbounty

Mozilla Critical Services disclosed a bug submitted by limusec: https://hackerone.com/reports/1984060 – Bounty: $1000