Login using disconnected google account i.e login using old email id

Disclosed: 2017-05-17 14:15:13 By tushar21 To weblate
Low
Vulnerability Details
there is vulnerability that allows loggin in using old email id i.e a disconnected google account attack scenario: 1: attacker has compromised google id of user 2:now user notices this and changes email id and removes previous authentication 3:but still attacker can login using disconnected google acvoint using login with google
Actions
View on HackerOne
Report Stats
  • Report ID: 223427
  • State: Closed
  • Substate: resolved
  • Upvotes: 4
Share this report