Hi,
On our statuspage you can subscribe via email to any planned or unplanned outages. All works perfect!
However, if I enter an emailadres from someone else that is already subscribed, I can see their subscriptions and change them. At the moment there is no notification email send for changes on the subscriptions that you would like to receive. From an security perspective we would like to have a notification email send to the emailadres if there are any changes in the subscriptions. Is something like this possible?
E.g:
Attacker would like to know which services are used by company A. Looks online and finds an emailadres employee@companyA.com. This email adress is subscribed on the statuspage and the attacker sees all the subscriptions company A is subscribed to and can change/remove the subscriptions.
On save, a notfication email would be send to employee@companyA.com that there were changes in the subscriptions to notify them.
Hope something like this is possible.
Kind regards,
Bart.
