Chaturbate · Report #418151
No rate limiting in starting up a bot.
Validstatus
lowseverity
15upvotes
9 Oct 2018disclosed
How it was found
hi security team, I was able to start up a bot numerous times.
- Goto https://chaturbate.com/b/username
- Choose a bot and capture the request.
- Send to intruder and repeat the step numerous times.
- I did this 196times 5.I was able to activate a bot numerous times
- My room was flooded with message which i will show your in the screenshot below. Thanks.
Impact
Bruteforcing.