[Bypass] Ability to invite a new member in sandbox Organization

How it was found

Summary: Able to bypass the restriction set in Organization sandbox (automatically created when you created sandbox program) to send an invite to another security researcher.

Description: In the default UI of (sandbox)Hackerone Organization, inviting another security researcher is restricted ex.: https://hackerone.com/organizations/hackycorp_demo/users/invite . There is a grayed message: You have reached the maximum number of team member invitations for this program. Please contact [email protected] if you need to lift the rate limit.

But using this endpoint i found in https://hackerone.com/assets/static/js/30.8f8e2bc5.chunk.js https://hackerone.com/organizations/hackycorp_demo/users/new_invite ==I can send an invite to anyone.==

Steps To Reproduce

Demo Organization: hackycorp_demo Test User : 0620
Invited using: [email protected] Real email address: ████

1. Open this URLhttps://hackerone.com/organizations/hackycorp_demo/users/new_invite
2. Type the email address of another security researcher
3. Please see attached video for the demo: ████

Impact

Bypass the restriction in the sandbox currently configured to send an invite to ane security researcher.

Similar to the report https://hackerone.com/reports/1088966 but on the Organization level.