21 matches found
HackerOne: Account recovery text message is sending a wrong domain to users.
Hey, I hope you're fine. : Summary: When users setup Account recovery at Authentication section Hackerone sends them text message to their updated phone number with a wrong domain link. Description: When users adds phone number at Account recovery, they get a text message on their phone number,...
0.2AI score
SaveExploits0
20