Business logic error

How it was found

Hi UPCHIEVE SECURITY TEAM

I'm Anto

Vulnerability : Business logic error There is no password verification while changing a password.

Steps to Reproduce : 1). Go to (https://hackers.upchieve.org/resetpassword). 2). Click the change password. 3). If your old password was ex: hacker and in new password enter the same password ex: hacker. 4). The password will be updated.

There is no password check mechanism on there. Fix it by making an alert " Your new password must be different"

Impact

Business logic error Please let me know if this can be fixed :)

Regards, Anto