HexBrain

Aspen · Report #288707

Email Spoofing

Spamstatus
lowseverity
11upvotes
9 Nov 2017disclosed

How it was found

There is an Email Spoofing Vulnerability. Steps to reproduce:

  1. Go to http://emkei.cz/
  2. Fill "From Email" field to [email protected] or any other aspen email.
  3. Fill the victim's address (your address) to "TO" field and fill in other details as you wish. You will receive email from aspen admin. Reference: https://hackerone.com/reports/575 Thank you for time and consideration you provided for reading my report. Note: If you don't find it in your inbox, see spam folder. If the victim is using Gmail/yahoo account it might be in spam folder. Your sincerely, Abartan Dhakal

#NOTE : If you are not interested in such vulnerabilities , do let me know, I will close the report my self so that I dont loose rep points

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original