Slack · Report #1461194
Email html Injection
Validstatus
lowseverity
$250bounty
28upvotes
19 May 2022disclosed
How it was found
This bug is Email html Injection present in name of workspace while creating
Impact
The input is unsanitized and vulnerable which led to html injection which may lead to phishing. when 2fa is applied it send mail with injected html