ProductBoard, Inc.: Insecure Invitation Link Handling

The invitation link handling process of satismeter.com was found to have a critical security vulnerability. The issue allowed unauthorized users to join an organization using invitation links sent to different email addresses, bypassing the email verification process. The vulnerability occurred...