Private Blog Content Disclosed in Atom Feed ($5000 USD)
Original Post:
We discussed this vulnerability during Episode 99 on 15 November 2021
Even if a Shopify blog was private and required a password the post titles and preview of content would be published in the globally accessible atom feed