HexBrain

Weblate · Report #243619

No Rate Limitation on Regenerate Api Key

Validstatus
5upvotes
21 Aug 2017disclosed

How it was found

Hi,

I discovered that there is no request throttling or limit on api key regeneration. Though theres a little change while making a total of 30 requests in a few seconds, server error occurred then it continued.

Screenshot

{F197872}

In the screenshot 685 denotes a processed request and 6052 denotes an error: on the server.

Shuaib

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original