Linktree · Report #1718574
A malicious admin can be able to permanently disable a Owner(Admin) to access his account
Validstatus
mediumseverity
$600bounty
55upvotes
25 Oct 2022disclosed
Summary
Ability to disable access to account
While exploring the Multiple Admin feature in the application. I noticed a behaviour that can lead to permanently disabling an Owner (Admin) to access his account.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.