Factlink: Password reset link doesn't expire.

2014-06-02T17:16:37
ID H1:14461
Type hackerone
Reporter shahriar
Modified 2014-06-05T10:34:03

Description

The password reset link sent by Factlink doesn't expire even after a long period of time. As Factlink account can be created 'without confirming' email id, so, this should be patched for the best practice.