Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2017/07/04 1:48 p.m.11 views

GSA Bounty: The user, who was deleted from Github Organization, still can access all functions of federalist, in case he didn't do logout

Description Hi. I found a non-critical session management bug, which still can have serious impact in some scenarios. When user perform login to the Federalist through Github, federalist checks his Organization ID but only upon login. When the user was deleted from organization for some reasons,...

0.1AI score
SaveExploits0
Rows per page
Query Builder