Meta characters not filtered on signup

Disclosed: 2014-07-08 10:00:32 By shahmeer-amir To factlink
Unknown
Vulnerability Details
You have not filtered control meta characters such as %00 etc on the sign up which allows an attacker to impersonate or hide their real identity within the application
Actions
View on HackerOne
Report Stats
  • Report ID: 13679
  • State: Closed
  • Substate: resolved
  • Upvotes: 5
Share this report