HexBrain

IBM · Report #1994227

response manipulation leads to bypass in register at employee website than 0 click account takeover

Validstatus
criticalseverity
32upvotes
21 Jun 2023disclosed

Summary

Registration bypass leading to account takeover was reported to IBM, analyzed and has been remediated. Thank you to our external researcher.

How it was found

The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original