HexBrain

ok.ru · Report #139319

Missing proper error message.

Informativestatus
2upvotes
21 Jul 2016disclosed

How it was found

Steps to reproduce: 1.Load the URL: http://ok.ru/ in any browser. 2.Now goto Browser settings and disable the Cookies. 3.Try to login using valid credentials . 4.Observed that user is redirected to login page again without any proper error message .

Technical Impact: This leads user to feel discomfort as user is not aware of the issue which is stopping him from login into his account ,which leads to loss of reputation.

Suggested Remediation:Error message like “ For smooth functioning of this site make sure that cookies are enabled on your browser.” should be displayed to make aware the user about the vulnerability.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original