HexBrain

Legal Robot · Report #263681

Improper error message

Informativestatus
mediumseverity
1 Sept 2017disclosed

How it was found

Hi team, First of all congrats for good work to enforced the new password security policy during registration but the password error banner is not updated as per the changes. During registration it only shows the error when i enter the password if is is less than 8 chars. but if i enter the 8+ chars error will say "Please fix this field.". Without knowing the exact error message it will be difficult to put good password. Same error message is showing while signing in.

  1. Improper Error message in registration form
  1. Click on register.
  2. enter password 8+ characters ex. 12345678
  1. Improper Error message in sign-in form
  1. Click on register.
  2. enter your old passowrd if it is simple. (Not possible to sign in)

Please fix this issue as soon as possible, Due to this user will know what's the real problem is happening during sign-in or during registration.

Thanks and regards, Pratham

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original