## Summary:
“Salam alikoum ” Hi team i hope you are well t is a pleasure to work in your program. I will begin to present the vulnerability that I found it: Information Disclosure via ?email parameter and ?api_key
## Steps To Reproduce:
1. “`waybackurls zerobounce.net | grep gmail “`
###Response :
“`
https://api.zerobounce.net/v2/validate?email=amee22person%40gmail.com&ip_address=&api_key=961a9299689144b48348b22975ce9334
https://api.zerobounce.net/v2/validate?email=aturnab%40gmail.com&ip_address=&api_key=961a9299689144b48348b22975ce9334
https://api.zerobounce.net/v2/validate?email=dixey34742%40fxmail.ws&ip_address=&api_key=961a9299689144b48348b22975ce9334
https://api.zerobounce.net/v2/validate?email=g%40gmail.com&ip_address=&api_key=961a9299689144b48348b22975ce9334
https://api.zerobounce.net/v2/validate?email=genius1000%40gmail.com&ip_address=&api_key=961a9299689144b48348b22975ce9334
https://api.zerobounce.net/v2/validate?email=gisele%40gmail.com&ip_address=&api_key=961a9299689144b48348b22975ce9334
https://api.zerobounce.net/v2/validate?email=goofus%40alreadysubscribed.net&ip_address=&api_key=961a9299689144b48348b22975ce9334
https://api.zerobounce.net/v2/validate?email=gppenheim%40gmail.com&ip_address=&api_key=961a9299689144b48348b22975ce9334
https://api.zerobounce.net/v2/validate?email=jhuang4821%40gmail.com&ip_address=&api_key=961a9299689144b48348b22975ce9334
https://api.zerobounce.net/v2/validate?email=RoblesFood%40gmail.com&ip_address=&api_key=961a9299689144b48348b22975ce9334
https://api.zerobounce.net/v2/validate?email=stacy%40slmpetersen.com&ip_address=&api_key=961a9299689144b48348b22975ce9334
https://api.zerobounce.net/v2/validate?email=test%40testmail.com&ip_address=&api_key=961a9299689144b48348b22975ce9334
https://api.zerobounce.net/v2/validate?email=testings%40gmail.com&ip_address=&api_key=961a9299689144b48348b22975ce9334
https://api.zerobounce.net/v2/validate?email=thesmiths%40gmail.com&ip_address=&api_key=961a9299689144b48348b22975ce9334
https://api.zerobounce.net/v2/validate?email=v%40gmail.com&ip_address=&api_key=961a9299689144b48348b22975ce9334
https://api.zerobounce.net/v2/validate?email=zachr80%40hotmail.com&ip_address=&api_key=961a9299689144b48348b22975ce9334
“`
## Supporting Material/References:
{F2037185}
## Impact
Information DisclosureRead More