Password reset link is not Expiring

Disclosed: 2016-06-12 16:05:03 By itly To veris
Unknown
Vulnerability Details
Hello, According to your policy, reset or change password link should be expired within 30 minutes. But it is not so, link is working even after completion of 30 minutes. Proof of Concept: Please find it attached. Do evaluate it and inform me accordingly. Best Regards, Hely H. Shah
Actions
View on HackerOne
Report Stats
  • Report ID: 118948
  • State: Closed
  • Substate: resolved
  • Upvotes: 5
Share this report