Missing policies for password in password_policies.go

Disclosed: 2026-03-27 07:15:27 By sinic To passhash
Unknown
Vulnerability Details
## Summary: Some missing policies to consider adding ## Policies: 1. Password History - There isno policy implemented for password history requirements. This will be for preventing users from reusing their previous passwords. 2. Strong password- here are no checks for strong password requirements like requirement for uppercase letters, lowercase letters, digits, and special characters. Make this checks to force stronger passwords. ## Impact Weak passwords can be guessed or brute-forced.
Actions
View on HackerOne
Report Stats
  • Report ID: 2439734
  • State: Closed
  • Substate: informative
Share this report