You're on your way to the next level! Join the Kudos program to earn points and save your progress.
Level 1: Seed
25 / 150 points
1 badge earned
Challenges come and go, but your rewards stay with you. Do more to earn more!
What goes around comes around! Share the love by gifting kudos to your peers.
Keep earning points to reach the top of the leaderboard. It resets every quarter so you always have a chance!
Join now to unlock these features and more
On our statuspage you can subscribe via email to any planned or unplanned outages. All works perfect!
However, if I enter an emailadres from someone else that is already subscribed, I can see their subscriptions and change them. At the moment there is no notification email send for changes on the subscriptions that you would like to receive. From an security perspective we would like to have a notification email send to the emailadres if there are any changes in the subscriptions. Is something like this possible?
Attacker would like to know which services are used by company A. Looks online and finds an emailadres employee@companyA.com. This email adress is subscribed on the statuspage and the attacker sees all the subscriptions company A is subscribed to and can change/remove the subscriptions.
On save, a notfication email would be send to employee@companyA.com that there were changes in the subscriptions to notify them.
Hope something like this is possible.
Thanks for reaching out to Atlassian Community!
I understand that it's frustrating that anyone having a subscriber's email address can modify their subscription. It's a known issue and we are currently investigating how to implement a feature that would trigger a confirmation email to subscribers once their settings were changed. We don't have a timeframe on when to expect this to be implemented, but we'll make sure to send you and other affected users a notification about that. The ticket reference is STSPG-1963 - tracked internally.
Thanks a lot for your feedback and please let me know if there's anything else I can help you with.