HexBrain

Weblate · Report #275303

Account Restore / Reactivating an old email via old reset link

Validstatus
4upvotes
27 Aug 2018disclosed

How it was found

Hi,

I noticed you now send a confirmation link after loading the reset link, below is a screenshot showing the email and highlighting the error.

{F227060}

Best Regards, @footstep

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original