Weblate · Report #223427
Login using disconnected google account i.e login using old email id
Validstatus
lowseverity
6upvotes
17 May 2017disclosed
How it was found
there is vulnerability that allows loggin in using old email id i.e a disconnected google account attack scenario: 1: attacker has compromised google id of user 2:now user notices this and changes email id and removes previous authentication 3:but still attacker can login using disconnected google acvoint using login with google