HexBrain

UPchieve · Report #1354368

Missing Validation in editing "Your Phone Number"

N/Astatus
mediumseverity
4upvotes
26 Mar 2022disclosed

How it was found

Verification method is missing in changing "Your Phone Number" .

There is no OTP or code send to new number for validating.

POC video : recording-1632905982558.webm

@thug645

Impact

Misconfiguration

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original