Lucene search

K
huntrKmaron1nA5D6C854-E158-49E9-BF40-BDDC93DDA7E6
HistoryJun 13, 2022 - 1:58 a.m.

Weak policy at Change password function

2022-06-1301:58:21
kmaron1n
www.huntr.dev
10

0.002 Low

EPSS

Percentile

57.2%

Description

We can register an normal account with >= 8 characters password. But we ccan change password with just 1 character when we use change password function

Proof of Concept

https://drive.google.com/file/d/1D-IDqrMiaBGLnZaZY9L3u-S4u-MoGxPc/view?usp=sharing

0.002 Low

EPSS

Percentile

57.2%

Related for A5D6C854-E158-49E9-BF40-BDDC93DDA7E6