Lucene search

K
huntrUonghoangminhchau666C2617-E3E9-4955-9C97-2F8ED5262CC3
HistoryAug 14, 2023 - 7:12 a.m.

New password can be set as same as the old password

2023-08-1407:12:38
uonghoangminhchau
www.huntr.dev
8
web application
password change
security
demo website
edit profile
bug bounty

0.0004 Low

EPSS

Percentile

14.2%

Description

The web application allows us to set new password as the old one at Password change function.

Detail:

1/ Access to the demo website and go to My profile.

2/ Choose Edit profile, at the Security tab, change the password with the new password and the old password are the same.

3/ Logout and login again to verify that it’s successful.

Proof of Concept

Link video PoC: https://drive.google.com/file/d/1b-iMln3MIowU1LAz9DiZtxygPpEz9oNJ/view?usp=sharing

0.0004 Low

EPSS

Percentile

14.2%

Related for 666C2617-E3E9-4955-9C97-2F8ED5262CC3