1 matches found
HackerOne: Mismatch between frontend and backend validation via `ban_researcher` leads to H1 support and hackers email spam
Summary: We found a mismatch between the frontend and backend validation when using the ban researcher feature, available for program customer. Description: When a program customer issues a ban, an automatic email will be send both to the banned user and H1 support. The problem is that fronted wi...