Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2017/02/05 2:4 p.m.35 views

Phabricator: Enumerating emails through "Forgot Password" form

mongoose mongoose mongoose Hi! I am testing typical local installation of Phabricator. Using the forgot password form it is possible to enumerate users emails because of message There is no account associated with that email address.. So attacker theoretically can figure out registered users emai...

1.3AI score
SaveExploits0
Rows per page
Query Builder