Veris · Report #118948
Password reset link is not Expiring
Validstatus
6upvotes
12 Jun 2016disclosed
How it was found
Hello,
According to your policy, reset or change password link should be expired within 30 minutes. But it is not so, link is working even after completion of 30 minutes.
Proof of Concept: Please find it attached.
Do evaluate it and inform me accordingly.
Best Regards,
Hely H. Shah