Security Bug

Hi, Roll 20 first post This bug appears to have fixed itself by the time i'm writing this post but I decided to post about it anyway. When i was signed into my account in a game i clicked the refresh page button on chrome and found myself in someone else's game, I could then access that persons account details page.  I can't recreate this bug anymore so I can't provide footage of this bug or anything else. All the best

Like wise that happened to me too - I was able to see 2 other accounts while trying to log into my own. Seems to be sorted for now but not what you want to see....

Hi, sorry for the thread closure! Please continue to report this issue if you see it again-- we are investigating what may have happened there.

It's happening again...

Last night I logged in to find myself in another users account again-After a brief look round to ensure it was really happening I signed out and logged into my own account again . This time I was in the correct account,but now there was a new game added entitled "Sorry I was logged into your account."  After checking to make sure my games were intact. I pressed the back button in my browser and found myself in yet another persons account logged in as them and able to view their account at will. What is going on? I have now been inside four other users accounts in the last seven days  and at least one person has been in mine. Not acceptable. How far has your investigation got....

Hmm today  roll20  opened straight into another account belonging to Gray A (Screenshots available) One of the players in one of his games was one of the previous accounts I have been logged into.  Is this happening to anyone else? 

Thanks for the quick post, David. We'll investigate further; a staff member might PM you for those screen shots and other information.