HexBrain

UPchieve · Report #1317494

No Rate Limit on forgot password page

N/Astatus
mediumseverity
5upvotes
26 Mar 2022disclosed

How it was found

Summary:

no rate limit bug on ur loigin page ..

Steps To Reproduce:

[add details for how we can reproduce the issue]

  1. [add step]
  2. [add step]
  3. [add step]

Supporting Material/References:

[list any additional material (e.g. screenshots, logs, etc.)]

  • [attachment / reference]

Recommendations for Fixing/Mitigation

[If you have a recommendation for how to fix, we would love to know so we can fix it faster. Even more appreciated would be a Merge Request! We are open source and our code is at https://gitlab.com/upchieve]

Impact

Your site should have 12-13 passwords or NAND passwords and limitations.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original