Password Policy Bypass

How it was found

Hi LegalRobot team,

I noticed that there is a strong Password policy enforced on login page which only allows passwords with 8 or more characters and they need to be a combination of Capital letters, small letters, and numbers/special characters. However i found that i am able to bypass this Password policy when trying to change password and set a very weak password on account.

I have attached steps to reproduce the issue (set the character 'a' as password) in document, please take a look at it.

Alternatively, i can give you credentials for my account which has password set to 123