Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2017/05/25 2:32 p.m.38 views

Cuvva: Verification code for Underwriter dashboard can be brute-forced

Hi Cuvva, On the page of Underwriter dashboard https://underwriter.partner.cuvva.com/login/verify, the first option is to enter the email address of the person having the access to dashboard. I entered the email address of the guy whose email address was getting displayed in the bug:...

6.9AI score
SaveExploits0
Rows per page
Query Builder