LY Corporation · Report #968742
Password reset by malicious input on air.line.me
Validstatus
23upvotes
27 Dec 2021disclosed
Summary
Due to the bug in the account verification process in the password reset function of air.line.me, it was possible to change other's passwords if a temporary password reset key was set to a space.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.