X / xAI · Report #33331
Flaw in valid password policy.
Informativestatus
3upvotes
30 Nov 2014disclosed
How it was found
Steps to reproduce
- Go to twitter.com
- Login with your existing password
- Change your password from settings.Make 6 space character as your password.
- After successful update of your password,logout from twitter.com
- Now login from mobile.twitter.com with existing password (which is 6 or more or less space characters)
- Now go to settings.
- Try to update your password.
- Every time you you request for update,it will say password can't be blank.So you will never be able to update your password from mobile.twitter.com again.