Algolia · Report #1089205
email verification bypass
Validstatus
mediumseverity
67upvotes
18 Feb 2021disclosed
Summary
An issue in the way email modification was handled during the email verification process allowed the creation of account with arbitrary email address, bypassing the email verification step.
A logical flaw resulting in email verification bypass! :D
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.