{"action":"closed","issue":{"url":"https://api.github.com/repos/RocketChat/Rocket.Chat/issues/3474","repository_url":"https://api.github.com/repos/RocketChat/Rocket.Chat","labels_url":"https://api.github.com/repos/RocketChat/Rocket.Chat/issues/3474/labels{/name}","comments_url":"https://api.github.com/repos/RocketChat/Rocket.Chat/issues/3474/comments","events_url":"https://api.github.com/repos/RocketChat/Rocket.Chat/issues/3474/events","html_url":"https://github.com/RocketChat/Rocket.Chat/issues/3474","id":158790464,"number":3474,"title":"Possible security issue","user":{"login":"iojeda","id":5243583,"avatar_url":"https://avatars.githubusercontent.com/u/5243583?v=3","gravatar_id":"","url":"https://api.github.com/users/iojeda","html_url":"https://github.com/iojeda","followers_url":"https://api.github.com/users/iojeda/followers","following_url":"https://api.github.com/users/iojeda/following{/other_user}","gists_url":"https://api.github.com/users/iojeda/gists{/gist_id}","starred_url":"https://api.github.com/users/iojeda/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/iojeda/subscriptions","organizations_url":"https://api.github.com/users/iojeda/orgs","repos_url":"https://api.github.com/users/iojeda/repos","events_url":"https://api.github.com/users/iojeda/events{/privacy}","received_events_url":"https://api.github.com/users/iojeda/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2016-06-06T22:29:58Z","updated_at":"2016-06-08T15:14:45Z","closed_at":"2016-06-08T15:14:44Z","body":"Rocket chat version 0.31.0\r\n\r\nI have Rocket.Chat install secured with an Nginx reverse proxy with TLS 1.2 enforcement.\r\nI told a friend of mine to run an atack and he was able to get a list of all rocket.chat users and their mails using a metasploit atack.\r\n\r\nI'm not sure if this is due to something I have done wrong with my Rocket.Chat configuration or this is an actual security issue.\r\nJust wanted to let you know.\r\nThanks for this great piece of software\r\nIf I can support you in any way about this issue please let me know.\r\n"}}
{"actor":{"display_login":"graywolf336"}}