HexBrain

Weblate · Report #223427

Login using disconnected google account i.e login using old email id

Validstatus
lowseverity
6upvotes
17 May 2017disclosed

How it was found

there is vulnerability that allows loggin in using old email id i.e a disconnected google account attack scenario: 1: attacker has compromised google id of user 2:now user notices this and changes email id and removes previous authentication 3:but still attacker can login using disconnected google acvoint using login with google

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original