Superhuman (formerly Grammarly) · Report #667740
Can register any mobile number in MFA without current code.
Validstatus
lowseverity
15upvotes
15 Aug 2019disclosed
Summary
@chackmate identified a vulnerability that allows a user to connect arbitrary phone numbers with their account. No users affected.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.