HexBrain

Legal Robot · Report #254927

Lack of input validation in e-mail & user name, job title, company name field

Informativestatus
lowseverity
1upvotes
31 Jul 2017disclosed

How it was found

Hi, During sign up input validation didn't deploy properly on e-mail & name field. I've tested inputing following e-mail during sign up: hacker~%@gmail.com Your system send email to verification the account though the e-mail address is invalid as gmail doesn't allow user to sign up using special characters like %,~ etc. {F208264} Another issue is during sign up name field & from account profile edit option name feild, job title, company name field also failed to validate user input and accept special characters like $, %, ~,!,{} . I've tested this using my account [email protected] {F208268} {F208270}

Hope you'll deploy a quick fix. I look forward to hear backck from you, thank you!

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original