Skip to content
Disclosing YouTube Creator Emails for a $20k Bounty
brutecat.com | blog | #bug-bounty | #information-disclosure | #api-security | #youtube | #google | #content-id
Summary
Dumping hidden parameters in a YouTube Studio endpoint via error-based schema leaks exposed Content Manager data tied to Content ID, revealing private email addresses of monetized creators.
- Published
- Collected