HexBrain

Weblate · Report #243842

Password token validation in Weblate Bypass

Validstatus
5upvotes
21 Aug 2017disclosed

How it was found

Hi,

This is a bypass of the fix on #229987. I could confirm that old link still works. Though you would need to use 2 browsers to pull this off

Reproduction Steps

  1. In Browser1, request a password reset
  • Load link sent to your email in the same browser
  • Request another password reset in Browser2
  • Load link sent to your email in the same browser
  • Change the password on Browser2
  • Successful :D
  • Change the password on Browser1
  • Success :D
  • Now login in any of the password with the last password.

Shuaib.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original