HexBrain

Legal Robot · Report #173195

Bypass 8 chars password complexity with 6 chars only due to insecure password reset functionaliy

Validstatus
21upvotes
29 Oct 2016disclosed

Summary

While password complexity requirements were implemented in the original signup page, these were not added to the password reset page. Thanks to this security researcher's efforts, we've added this functionality there as well.

How it was found

The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original