Legal Robot · Report #173195
Bypass 8 chars password complexity with 6 chars only due to insecure password reset functionaliy
Validstatus
21upvotes
29 Oct 2016disclosed
Summary
While password complexity requirements were implemented in the original signup page, these were not added to the password reset page. Thanks to this security researcher's efforts, we've added this functionality there as well.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.