Legal Robot · Report #255021

Profile shows incorrect account creation date

Validstatus

7upvotes

31 Jul 2017disclosed

Summary

i discovered that there is security design issue in time function(coding issue). it was got reset (to 0) at after refreshing that page. Thanks @danrubins for quickly understand that issue and fixed very soon in dev environment.

How it was found

Hi Team,

I get to know that you are using showing joined time. it's contain design issue. I think that you show for once user login in to their account and it should show from howmany minutes that user logged in? but i can see here a design issue, is that whenever we refresh page https://app.legalrobot.com/account , it started from 0 seconds.

here i can see that function issue, that is reset to 0 after every page reset. (https://app.legalrobot.com/account). it should reset only at logout time.

Thanks, Vishal.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original