
Three months ago, I noticed a security issue on the Apollo website. I tried to inform them about this (including that at some point I could publicly disclose it), and I had absolutely no reply from their support team. I decided to publicly tell the story and share the details. I'm sure they will fix in hours, the goal to inform them to fix this is about to be reached in a more effective way than before. Now it's more than 90 days after the initial notice. I'm sharing with you some more details. The issue is still present. Edit : seems to be fixed end of 2022, using the method "no need to display the email back".