U.S. Dept Of Defense · Report #875049
Register with non accepted email types on https://███████
Validstatus
mediumseverity
6upvotes
10 Feb 2021disclosed
How it was found
Summary
Hello, this is a new report from #874457. Thank you @agent-l8 for your advice, really appreciate it. This report is about register with non-accepted email types on https://███████
Steps to Reproduce
- Register With Not Accepted Email Types
- Go to https://█████████
- Fill all the field and in the email use gov domain
- Intercept the request and change to a different email
- Here the video ████████
Impact
Attacker can register with non-accepted email
Thank you, @dianeme