HexBrain

Weblate · Report #257384

No rate limit or captcha to identify humans

Validstatus
1upvotes
15 Sept 2017disclosed

How it was found

Affected URL: https://hosted.weblate.org/hosting/

Issue: There is no captcha or rate limit to protect from bots against adding request for new project hosting. Which makes it easy for an attacker to perform spamming.

Shall you need any more info notify me,

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original