ID H1:131053 Type hackerone Reporter drstache Modified 2017-08-21T13:28:04
Description
At https://gratipay.com/USER/emails/ you can submit a non valid email.
To do it you only need to change type="email" in type="text" , you are using a filter, but special chars pass though, as you can see in the screenshots.
{"id": "H1:131053", "type": "hackerone", "bulletinFamily": "bugbounty", "title": "Gratipay: Submit a non valid syntax email", "description": "At https://gratipay.com/USER/emails/ you can submit a non valid email.\nTo do it you only need to change `type=\"email\"` in `type=\"text\"` , you are using a filter, but special chars pass though, as you can see in the screenshots.", "published": "2016-04-15T11:01:53", "modified": "2017-08-21T13:28:04", "cvss": {"score": 0.0, "vector": "NONE"}, "href": "https://hackerone.com/reports/131053", "reporter": "drstache", "references": [], "cvelist": [], "lastseen": "2018-04-19T17:34:09", "viewCount": 1, "enchantments": {"score": {"value": 0.8, "vector": "NONE", "modified": "2018-04-19T17:34:09", "rev": 2}, "dependencies": {"references": [], "modified": "2018-04-19T17:34:09", "rev": 2}, "vulnersScore": 0.8}, "bounty": 0.0, "bountyState": "informative", "h1team": {"handle": "gratipay", "url": "https://hackerone.com/gratipay", "profile_picture_urls": {"small": "https://profile-photos.hackerone-user-content.com/000/001/868/5b2b5a44e2439cf6fe880b374cbbeaf38d740c6b_small.jpg?1458214340", "medium": "https://profile-photos.hackerone-user-content.com/000/001/868/d74b2c3d5d3975cb38a59a3176d952c3553a72f1_medium.jpg?1458214340"}}, "h1reporter": {"url": "/drstache", "hacker_mediation": false, "profile_picture_urls": {"small": "/assets/avatars/default-71a302d706457f3d3a31eb30fa3e73e6cf0b1d677b8fa218eaeaffd67ae97918.png"}, "hackerone_triager": false, "disabled": false, "username": "drstache", "is_me?": false}, "immutableFields": []}