Session Management

Disclosed: 2016-06-17 17:28:24 By lucky1015k To paragonie
Unknown
Vulnerability Details
When i click on forgot password i will get a reset link to my account when i login with the same email and password it will login to my account now if i open the reset link in another web browser and change the password and login to my account the session in the first browser is not expired i am able to use my account in both browsers
Actions
View on HackerOne
Report Stats
  • Report ID: 145300
  • State: Closed
  • Substate: not-applicable
  • Upvotes: 5
Share this report