search

calcom / cal.com

Scheduling infrastructure for absolutely everyone.
https://cal.com
Other
32.47k stars 8.03k forks source link

[CAL-4577] seated bookings leak attendee information #17246

Closed supalarry closed 3 weeks ago

supalarry commented 4 weeks ago

I have a seated event type with Share attendee information between guests disabled.

First, Rajiv make a booking and then Somay made a booking on same day and time, and Somay was able to see that Rajiv is one of the attendees while only Somay should appear in attendees. Curious if someone else can try reproducing this.

Second, customer on Slack reported that seat attendee information is leaked in emails:

Screenshot 2024-10-22 at 16 28 57

When we tested this in web app same was true - after Somay cancelled his booking the email that he received said that booking between Lauris Skraucis (me) and Rajiv was cancelled. Shortly, if second person of a slot cancels seated booking then he / she receives e-mail mentioning first attendees name.

CAL-4577

anikdhabal commented 3 weeks ago

Booking leak on success page was fixed by this:- https://github.com/calcom/cal.com/pull/17338 And the booking title issue is transferred here:- https://github.com/calcom/cal.com/issues/17367