In JetBrains Upsource prior to 2020.1, information disclosure is possible because of an incorrect user matching algorithm.
jetbrains upsource