Deriv.com · Report #98469
Email Verification Link can be Used as Password Reset Link!
Summary
I was able to turn an email verification link into a password reset link.
Proof Of Concept: https://www.binary.com/user/validate_link?step=account&verify_token=q4b4QVyLZD9daVpAdiXAIiAExC8DaGmqFPk8wNt9nTqAm7Pa&l=EN Remove "step=account" from the URL, then enter your email. After entering your email, you will be able to reset your password.
How it was found
Hello again!
basically,I have found a new issue which allows attacker to use a Email Verification Link and make it into a password reset link!
Proof Of Concept: When you Send a Email Verification Link It looks like this "https://www.binary.com/user/validate_link?step=account&verify_token=q4b4QVyLZD9daVpAdiXAIiAExC8DaGmqFPk8wNt9nTqAm7Pa&l=EN"
Remove "step=account" from the URL, and tadaa! you will see once u enter the email you can change password!
Thank you, -Karim