HexBrain

HackerOne · Report #3991

Accepting Invalid characters on email address

Validstatus
7upvotes
25 Apr 2016disclosed

How it was found

I tried to change my email address on hackerone.com.And when I tried adding null Bytes,it was being accepted by hackerone.com. I am registered wth ███ and I tried to change my email address to ████%00 And guess what,this address was granted as an email address.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original