Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2022/05/29 7:29 a.m.32 views

Alohi: Weak rate limit for SIGN.PLUS email verification

zeesozee identified a way to reset the rate limit concerning the "Confirm your email" verification endpoint for new accounts. This increases the chance of successful bruteforce from an attacker who would try to register with a fake email. The issue was fixed immediately...

3.4AI score
SaveExploits0
Rows per page
Query Builder