HexBrain

Paragon Initiative Enterprises · Report #145300

Session Management

N/Astatus
5upvotes
17 Jun 2016disclosed

How it was found

When i click on forgot password i will get a reset link to my account when i login with the same email and password it will login to my account now if i open the reset link in another web browser and change the password and login to my account the session in the first browser is not expired i am able to use my account in both browsers

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original