HexBrain

Legal Robot · Report #264101

design issue exists on login page

Spamstatus
13upvotes
28 Aug 2017disclosed

How it was found

legalrobot allows an user to set email as password only by resetting password either by logged in and changing it into profile

password changed succesfully

but the user couldn't log in to the app.legalrobot.com because

js checks with email and password and it states it couldn't be same

also not allowing the user to log in

Design issues

{F216519}

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original