HexBrain

U.S. Dept Of Defense · Report #875049

Register with non accepted email types on https://███████

Validstatus
mediumseverity
6upvotes
10 Feb 2021disclosed

How it was found

Summary

Hello, this is a new report from #874457. Thank you @agent-l8 for your advice, really appreciate it. This report is about register with non-accepted email types on https://███████

Steps to Reproduce

  1. Register With Not Accepted Email Types
  2. Go to https://█████████
  3. Fill all the field and in the email use gov domain
  4. Intercept the request and change to a different email
  5. Here the video ████████

Impact

Attacker can register with non-accepted email

Thank you, @dianeme

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original