DRIVE.NET, Inc. · Report #835647

[www.drive2.ru] Insufficient Security Configurability - Notification email is not sent when email is changed.

Validstatus

lowseverity

27upvotes

23 Oct 2020disclosed

Summary

A notification email is not sent when the email address is changed.

Notification email is not sent when email is changed.

Best Practices As recommended practices, Important tasks like changing emails should have notification emails.

Technical severity	VRT category	Specific vulnerability name	Variant / Affected function
P5	Insufficient Security Configurability	Lack of Notification

The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original