Legal Robot · Report #115845
Rate limiting on Email confirmation link
Validstatus
4upvotes
19 Sept 2016disclosed
Summary
Security researcher discovered a potential issue where no rate limiting was applied to sensitive functions, like email (re)confirmation links.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.