AWS keys and user cookie leakage via uninitialized memory leak in outdated librsvg version in Basecamp

Posted on September 22, 2023by bugbounty

Basecamp disclosed a bug submitted by neex: https://hackerone.com/reports/2107680 – Bounty: $8868