HexBrain

Weblate · Report #1238749

No rate Limit on Add new Translation Project

Validstatus
9upvotes
21 Jun 2021disclosed

How it was found

Attacker able to create unlimited Translation projects which lead to no more project name for the users who wanted to create new project on hosted.weblate.org

Below is the POC video which ,you can go through

Impact

Other users cant use the project names there wanted and attacker can occupy space where the project are stored

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original