HexBrain

Legal Robot · Report #260662

No length limit in invite_code can cause server degradation

Validstatus
4upvotes
31 Aug 2017disclosed

How it was found

Hi Team,

I get to know that in every field is secured by restricted limit by length, but, i can see that one place where you forget to add that security feature , which can cause server degradation.

https://app.legalrobot-uat.com/dmca-safe-harbor

Here, i can see feature to add invite-code , but i can see there is no length limit in that filed.

i can recommend to restrict limit to 10-12 character (as per business requirement ).

Thanks, Vishal.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original