Bug in Google's Bug Tracker Lets Researcher Access List of Vulnerabilities

A link to the researchers write-up would be more fitting I believe. https://medium.com/@alex.birsan/messing-with-the-google-buga...

Thanks for sharing! I loved the details so I can take them into account during development.

+1. This is blog spam

Oh, that's bad. Unsubscribe blindly sends any arbitrary email address a summary of the internal-only, unpatched vulnerability.

I believe this is the public web interface to Google's issue tracker.

I wonder if they posted the bug he found to the issue tracker as they were taking steps to fix the issue tracker.