Mixmax · Report #233376
mailbomb through invite feature on chrome addon
Validstatus
mediumseverity
6upvotes
16 Jul 2017disclosed
Summary
We didn't rate-limit our API to invite users to Mixmax, leading to potential spamming.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.