HexBrain

MTN Group · Report #761000

Account Take over of millions of MTN users account due to lack of Rate limiting when sending OTP code

Validstatus
highseverity
13upvotes
13 Apr 2020disclosed

How it was found

I attached a PDF document to this report which explained the vulnerability in full details and I also attached a link to the POC video in the document.

Impact

Account take over of about any MTN user account.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original