Stripo Inc · Report #887167
multiple email usage -my.stripo.email-
Validstatus
mediumseverity
7upvotes
3 Jul 2020disclosed
Summary
I first went to the "my.stripo.emai" view and registered with my google account. Then I entered the profile. I have replaced my email with an email that is not registered with your google account.I received a verification message on the email I changed. The button was not clicked. I copied it by right-clicking and went to the link.my e-mail was successfully changed but I was still able to access my email from my google account.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.