VK.com · Report #67562
Issue in the implementation of captcha and race condition
Validstatus
14upvotes
29 Sept 2016disclosed
Summary
Reuse of captcha.
The researcher was able to find a misconfiguration in the captcha mechanism which allowed him to reuse any captcha and bypass the uniquness of the same .
Furthermore the race condition bypassed the no. of retries .
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.