Mozilla: Bypass Email Verification on Add Email Monitoring

A security vulnerability has been identified in the email verification process of Mozilla Monitor. The issue allowed attackers to bypass the email verification step when adding a new email address for monitoring. The vulnerability was exploited by obtaining the verification token from the server...

Mozilla: Race condition leads to add more than 5 email at Data breaches monitor system at https://stage.firefoxmonitor.nonprod.cloudops.mozgcp.net

A race condition vulnerability was identified in the Mozilla Monitor application. The application was designed to limit users to adding a maximum of 5 email addresses for monitoring potential data breaches. However, due to the race condition, it was possible to bypass this restriction and add mor...