HexBrain

HackerOne · Report #10109

Flooding mailbox of user

Informativestatus
6upvotes
30 Apr 2014disclosed

How it was found

There seems to be no prevention from sending multiple password reset links to a selected e-mail. As a result mailbox of the user can be flooded with these mails. I would recommend to add CAPTCHA in forgot password functionality.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original