UPchieve · Report #1317494
No Rate Limit on forgot password page
N/Astatus
mediumseverity
5upvotes
26 Mar 2022disclosed
How it was found
Summary:
no rate limit bug on ur loigin page ..
Steps To Reproduce:
[add details for how we can reproduce the issue]
- [add step]
- [add step]
- [add step]
Supporting Material/References:
[list any additional material (e.g. screenshots, logs, etc.)]
- [attachment / reference]
Recommendations for Fixing/Mitigation
[If you have a recommendation for how to fix, we would love to know so we can fix it faster. Even more appreciated would be a Merge Request! We are open source and our code is at https://gitlab.com/upchieve]
Impact
Your site should have 12-13 passwords or NAND passwords and limitations.