Legal Robot · Report #115844
Rate limiting on password reset links
Validstatus
4upvotes
16 Sept 2016disclosed
Summary
Security researcher discovered a potential issue where no rate limiting was applied to sensitive functions, like password reset links.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.