HexBrain

Infogram · Report #764335

Bypass to report #280389 [Thinking The issue is not fixed Yet]

Validstatus
mediumseverity
6upvotes
7 Feb 2020disclosed

How it was found

Please see the report https://hackerone.com/reports/280389. There it was mentioned that it is resolved but the fact is that I tried with 5000 and it flooded my email. I think the issue is not solved. Please look into this. {F668239}

Impact

Please fix as rate limit on the password reset functionality should be present to avoid email flooding.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original