[Bypass] Ability to invite a new member in sandbox Organization

**Summary:** Able to bypass the restriction set in Organization sandbox (automatically created when you created sandbox program) to send an invite to another security researcher. **Description:** In the default UI of (sandbox)Hackerone Organization, inviting another security researcher is restricted ex.: https://hackerone.com/organizations/hackycorp_demo/users/invite . There is a grayed message: *You have reached the maximum number of team member invitations for this program. Please contact [email protected] if you need to lift the rate limit.* But using this endpoint i found in https://hackerone.com/assets/static/js/30.8f8e2bc5.chunk.js https://hackerone.com/organizations/hackycorp_demo/users/new_invite ==I can send an invite to anyone.== ### Steps To Reproduce Demo Organization: hackycorp_demo Test User : 0620 Invited using: [email protected] Real email address: ████ 1. Open this URLhttps://hackerone.com/organizations/hackycorp_demo/users/new_invite 2. Type the email address of another security researcher 3. Please see attached video for the demo: ████ ## Impact Bypass the restriction in the sandbox currently configured to send an invite to ane security researcher. Similar to the report https://hackerone.com/reports/1088966 but on the Organization level.