Google awards student $10k for discovery of App Engine data leak flaw

Charlie Osborne reports:

Google has awarded $10,000 to a high school student for the discovery of a bug in Google’s App Engine server which could lead to information disclosure.

This week, Ezequiel Pereira said in a blog post that he went bug hunting on July 11 simply due to boredom, and after several failed attempts, stumbled upon a way to change the Host Header in requests to the App Engine server without authentication.

Read more on ZDNet.

About the author: Dissent

Comments are closed.