(Not sure) Juxt Website vulnerability report

[magic moth]

Recently, I found out a vulnerability on the juxt website where you can dm people a blank message without being friends with

I don't know and not sure if this works all the time, and if it can be abusable or not

I have a video of me showing how it works, should I send it here?

(I think) With this, you can even dm people like Jon using this vulnerability

[fast locust]

i will let jon know to make everything free

😡

[tranquil star]

I wouldn't class this as a vulnerability, it's just a bug.

Please file this in the appropriate GitHub repository instead of here

https://github.com/PretendoNetwork/juxtaposition-ui/issues/new/choose

[sudden lagoon]

Next time report these issues privately

And make sure they are actually exploitable first

And how much damage it can cause

[magic moth]

you can kinda of spam people's inbox?
But is kinda of, useless. Idk

[sudden lagoon]

Spamming random people's inbox is not actually a minor issue

If it works it's actually very serious

And you dont want bad actors reading this thread and starting causing chaos

[fast locust]

jon needs to make it free!

[tranquil star]

@sudden lagoon might be worth closing the thread, I took this a bit less seriously than it should be taken

[tranquil star]

if you have nothing constructive to add, just don't reply

[sudden lagoon]

Please don't

[magic moth]

Oh sorry, I did not know where to post the issue

Yeah might be worth closing the thread

[sudden lagoon]

it's okay, test it first to make sure it works

and then report it on github