Weblate · Report #229541
Captcha Bypass at Email Reset can lead to Spamming users.
Validstatus
7upvotes
2 Jun 2017disclosed
Summary
Because of #223525 you've implemented captcha on Reset Email functionality. But it can be bypassed and any attacker can flood/spam victim with reset emails in his Email Inbox.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.