Mintlify GitHub read/write token leak

Re:Mintlify GitHub read/write token leak by ethanwillis on Sunday March 17, 2024 @01:20AM (#39732123)

I reported security issues to Mintlify back when they used Discord for support. Gave recreation steps. Never got any feedback that looked to me like they were looking into it.

I reported similar issues to what's described in May 2023.

[ Parent | on HN ]

Re:Mintlify GitHub read/write token leak by hanyiwang on Sunday March 17, 2024 @11:13PM (#39740231)

Hey Ethan! Han from Mintlify here.

It's been awhile I hope you're doing well!

The vulnerability issue that you reported, if I recall correctly, was relating to server-forwarding attacks via our API playground. We've addressed that issue around 8 months ago, and unfortunately, it was not the root of this incident.

Please correct me if I am wrong though!

[ Parent | on HN ]