Lucene search

K
huntrChucsse00544982-365A-476B-B5FE-42F02F11D367
HistoryApr 24, 2023 - 7:56 p.m.

Bypass change password policy

2023-04-2419:56:16
chucsse
www.huntr.dev
8
vulnerability
demo site
password policy
bypass
validation
bug bounty

EPSS

0.002

Percentile

56.0%

Description

I tested your demo site and discovered a vulnerability that could bypass password length and password complexity validation in your accountโ€™s password change function.

Proof of Concept

link video PoC

https://drive.google.com/file/d/1r2TAeFdLA_eEREUccDoE86Yacavv79VR/view?usp=sharing

EPSS

0.002

Percentile

56.0%

Related for 00544982-365A-476B-B5FE-42F02F11D367