I reported an issue to Google, which allows an attacker to confirm whether someone is logged in to any one of a list of specific Google accounts.

The post How to confirm a Google user’s specific email address (Bug Bounty Submission) appeared first on Tom Anthony.