HackerOne · Report #3991
Accepting Invalid characters on email address
Validstatus
7upvotes
25 Apr 2016disclosed
How it was found
I tried to change my email address on hackerone.com.And when I tried adding null Bytes,it was being accepted by hackerone.com. I am registered wth ███ and I tried to change my email address to ████%00 And guess what,this address was granted as an email address.