BugCrowd Bug Bounty Disclosure: P4 – Publicly editable Google Slides linked from nasa.gov enables unauthorized content modification (content integrity & brand abuse risk – Epenetus-Matias-Putra

October 16, 2025
Publicly editable Google Slides linked from nasa.gov enables unauthorized content modification (content integrity & brand abuse risk

Publicly editable Google Slides linked from nasa.gov enables unauthorized content modification (content integrity & brand abuse risk

Engagement: National Aeronautics and Space Administration (NASA) – Vulnerability Disclosure Program
Disclosed at: 2025-10-09T14:14:26Z
Priority: P4
Status: Resolved

Summary

This can be done by attackers to carry out phishing/spread viruses or fake content.

Activity Feed

Actor Details Timestamp (UTC)
Martin_NASA Martin_NASA published 2025-10-09T14:14:26Z
Martin_NASA Martin_NASA sent a: message 2025-10-09T14:14:01Z
Epenetus-Matias-Putra Epenetus-Matias-Putra sent a: message 2025-10-08T23:18:52Z
Mason357_Bugcrowd Mason357_Bugcrowd resolved a blocker for 2025-10-08T21:20:07Z
Mason357_Bugcrowd Mason357_Bugcrowd changed the state to to resolved 2025-10-08T21:19:56Z
Martin_NASA Martin_NASA created a blocker on 2025-10-07T19:24:29Z
Mason357_Bugcrowd Mason357_Bugcrowd resolved a blocker for 2025-10-07T16:05:01Z
Velvet Velvet created a blocker on 2025-09-30T17:01:54Z
Epenetus-Matias-Putra Epenetus-Matias-Putra sent a: message 2025-09-28T04:31:37Z
Epenetus-Matias-Putra Epenetus-Matias-Putra sent a: message 2025-09-22T09:06:20Z
Epenetus-Matias-Putra Epenetus-Matias-Putra sent a: message 2025-09-10T23:29:48Z
Martin_NASA Martin_NASA changed the state to to unresolved 2025-09-10T20:47:29Z
pm_bugcrowd pm_bugcrowd changed the state to to triaged 2025-09-10T19:49:19Z
pm_bugcrowd pm_bugcrowd changed the severity to 2025-09-10T19:49:17Z
pm_bugcrowd pm_bugcrowd sent a: message 2025-09-10T19:49:07Z
pm_bugcrowd pm_bugcrowd resolved a blocker for 2025-09-10T19:47:50Z
Epenetus-Matias-Putra Epenetus-Matias-Putra sent a: message 2025-09-10T14:04:42Z
Velvet Velvet created a blocker on 2025-09-09T16:08:25Z
Epenetus-Matias-Putra Epenetus-Matias-Putra requested 2025-08-14T13:04:49Z
Epenetus-Matias-Putra Epenetus-Matias-Putra sent a: message 2025-08-11T23:22:47Z
Epenetus-Matias-Putra Epenetus-Matias-Putra sent a: message 2025-08-11T17:07:15Z
Mason357_Bugcrowd Mason357_Bugcrowd sent a: message 2025-08-11T16:53:01Z
Mason357_Bugcrowd Mason357_Bugcrowd changed the state to to informational 2025-08-11T16:52:56Z
Mason357_Bugcrowd Mason357_Bugcrowd changed the severity to 2025-08-11T16:52:54Z
Epenetus-Matias-Putra Epenetus-Matias-Putra created the submission 2025-08-10T12:32:08Z

Support Our Work

A considerable amount of time and effort goes into maintaining this website, creating backend automation and creating new features and content for you to make actionable intelligence decisions. Everyone that supports the site helps enable new functionality.

If you like the site, please support us on Patreon or Buy Me A Coffee using the buttons below.

AI APIs OSINT driven New features
Buy Me A Coffee Patreon
Tags: , ,

You may have missed

Bugcrowd Logo

BugCrowd Bug Bounty Disclosure: P4 – Sensitive NASA Jira & Employee Data Exposure via Public JSFiddle –

October 16, 2025
Bugcrowd Logo

BugCrowd Bug Bounty Disclosure: P4 – Publicly editable Google Slides linked from nasa.gov enables unauthorized content modification (content integrity & brand abuse risk – Epenetus-Matias-Putra

October 16, 2025
Bugcrowd Logo

BugCrowd Bug Bounty Disclosure: P4 – open redirect vulnerability occurring at https://keycloak.shared-services.staging.appdat.jsc.nasa.gov/ – uko3211

October 16, 2025
Bugcrowd Logo

BugCrowd Bug Bounty Disclosure: P5 – internal IP Disclosure via Public DNS Record (blue.guest.hq.nasa.gov) – Theekshana_kusal

October 16, 2025
Bugcrowd Logo

BugCrowd Bug Bounty Disclosure: P5 – Directory Listing Vulnerability – Vinit06

October 16, 2025