ExpressionEngine · Report #411068
License verification mechanism can be bypassed
Validstatus
lowseverity
11upvotes
28 Sept 2018disclosed
Summary
@unbaiat discovered that an invalid license file could be accepted as valid in certain circumstances. @unbaiat gave a detailed report with step-by-step instructions for replicating, enabling a speedy resolution to the issue.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.