Asking for a friend here:
someone who doesn't work in Security found a vulnerability in a SaaS used by their child's school that allows impersonation.
Any recommendations for a complete newbie to disclose safely without minimal risk of being sued?
#Vulnerability #VulnerabilityDisclosure #ResponsibleDisclosure #AdviceNeeded
Emily Gladstone Cole
npub1hg…3julj
2026-10-13 22:52:31 UTC
Author Public Key
npub1hg0sljjruxr2zlztdcg855twnw7qwe93seh9rtwxtptrn33pxndsj3juljSeen on
wss://relay.momostr.pinkPublished at
2026-10-13 22:52:31 UTCEvent JSON
{
"id": "db8dfea698cddbe3c33d102b5892c04bc3ecb572ed746a2e4f971d8ac09b355d",
"pubkey": "ba1f0fca43e186a17c4b6e107a516e9bbc0764b1866e51adc6585639c62134db",
"created_at": 1791931951,
"kind": 1,
"tags": [
[
"t",
"adviceneeded"
],
[
"proxy",
"https://infosec.exchange/@Emily/117436052356007351",
"web"
],
[
"t",
"responsibledisclosure"
],
[
"t",
"vulnerability"
],
[
"t",
"vulnerabilitydisclosure"
],
[
"proxy",
"https://infosec.exchange/users/Emily/statuses/117436052356007351",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/users/Emily/statuses/117436052356007351",
"pink.momostr"
],
[
"-"
]
],
"content": "Asking for a friend here:\n\nsomeone who doesn't work in Security found a vulnerability in a SaaS used by their child's school that allows impersonation.\n\nAny recommendations for a complete newbie to disclose safely without minimal risk of being sued?\n\n#Vulnerability #VulnerabilityDisclosure #ResponsibleDisclosure #AdviceNeeded",
"sig": "3c9fe847c87292a62092f12982e5f6fef43478d51ffa74182f08d6006ed6cf546c86ab13645ef6184a106fd5dd6a962f7b659665093ae798ba652e3ed8d97e5b"
}