Chaturbate · Report #418145
No rate limiting in changing room subject.
Validstatus
lowseverity
19upvotes
9 Oct 2018disclosed
How it was found
Before i shed more light on this: I noticed i can create over 200 apps but i don't really know how valid that was. I want to report that there is no rate limiting in changing room subject. Attacker scenrio:
- Navigate to https://chaturbate.com/b/your username
- Try to create a room subject and capture the request.
- Send to intruder and repeater it numerous times.
- I tried this 144 times and it was succesful Thanks Below is a video as a poc
Impact
bruteforcing.