DRIVE.NET, Inc. · Report #1006691
[www.drive2.ru] Insufficient Security Configurability - Notification message not sent when account is deleted
Validstatus
lowseverity
16upvotes
23 Oct 2020disclosed
Summary
Email notifications are not sent when account is deleted.
Email notifications are not sent when account is deleted.
Best Practices As recommended practices, For security reasons, users should be able to be notified via email notification of changes to important operations such as account deletion.
| Technical severity | VRT category | Specific vulnerability name | Variant / Affected function |
|---|---|---|---|
| P5 | Insufficient Security Configurability | Lack of Notification |
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.