MTN Group · Report #1305766
There is no rate limit for SME REGISTRATION PORTAL
Validstatus
15upvotes
19 Sept 2022disclosed
How it was found
Summary:
The speed limit for the https://mtngbissau.com/registo/ endpoint has not been implemented.
Steps To Reproduce:
- Go to the https://mtngbissau.com/registo/
- fill out the Registration form
- Send request to Intruder.
- Set your payloads and start attack.
- There is no rate-limit.
Impact
Attacker can register false n-number of request which lead to DDos attack.