X / xAI · Report #27166
Missing Rate Limiting on https://twitter.com/account/complete
Validstatus
1upvotes
10 Nov 2014disclosed
How it was found
The following link is missing rate limiting https://twitter.com/account/complete
by which an attacker can get all the valid phone no. on twitters account.