Issue with password reset functionality [Minor]

Disclosed: 2016-07-03 20:41:34 By ahsan To paragonie
Unknown
Vulnerability Details
Dear Team, There is password change issue with bridge.cspr.ng Issue: ------------- User is not receiving notification when he/she reset password via password reset link. when user change his info like password change. User doesn't get email notification for password change etc. It will be a good practice to always send email notification for user for any user related info update. Please let me know if more details required. I hope you will fix it soon! Regards, Ahsan Tahir
Actions
View on HackerOne
Report Stats
  • Report ID: 149027
  • State: Closed
  • Substate: informative
  • Upvotes: 5
Share this report