Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2019/12/24 4:42 p.m.107 views

Stripo Inc: No Rate Limiting on /reset-password-request/ endpoint

Hi there ! I noticed when we hit the /reset-password-request/ endpoint too many times via some proxy for e.g:- Burp there is no rate limit on that endpoint and you can spam the email with 100's of requests and resend even more password reset emails to the users as there is no rate limiting on tha...

7.2AI score
SaveExploits0
Rows per page
Query Builder