ClickUp’s Hardcoded API Key Has Silently Leaked 959 Corporate and Government Emails for 15 Months
A hardcoded API key in ClickUp’s public JavaScript file exposed 959 corporate and government email addresses for over 15 months after responsible disclosure in January 2025. Affected organizations include Fortinet, Home Depot, Mayo Clinic, and multiple state government agencies. No authentication was required to exploit the flaw.
Itagora tiene in archivio titolo e sommario per la ricerca interna. Il testo completo resta sulla fonte. Il link in uscita non invia referrer.