Weblate · Report #404713

2nd issue>>> flood of email no rate limit on delete account confirmation email >>

Validstatus

lowseverity

6upvotes

28 Sept 2018disclosed

Summary

There was no rate limit on delete account confirmation email, leading to user being able to send (himself) flood of emails.

The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original