Udemy · Report #164239
NON VALIDATION OF SESSIONS AFTER PASSWORD CHANGE
Duplicatestatus
6upvotes
16 Sept 2016disclosed
Summary
bug introduced which prevented password change from invalidating sessions other than the one initiating the password change.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.