HexBrain

Gratipay · Report #128121

fix bug in username restriction

Validstatus
mediumseverity
15upvotes
20 Aug 2016disclosed

How it was found

Desciption: Username 1.0-payout is not restricted.

POC URL: Visit https://gratipay.com/1.0-payout/ and you will end up at my profile page.

Regards Uttam

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original