General Motors · Report #116432
E-mail Spoof in media.gm.com
Validstatus
1upvotes
23 May 2016disclosed
Summary
Email Spoofing vulnerability
An email input form existed which may allow email spoofing through a forged sender address. The form has been remediated such that it no longer accepts user input through this field.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.