Factlink: Password reset link doesn't expire.

ID H1:14461
Type hackerone
Reporter shahriar
Modified 2014-06-05T10:34:03


The password reset link sent by Factlink doesn't expire even after a long period of time. As Factlink account can be created 'without confirming' email id, so, this should be patched for the best practice.