Wrong password validation message

Disclosed: 2017-10-04 20:44:54 By ashish_r_padelkar To legalrobot
None
Vulnerability Details
Hello, Your password validation message seems to be contradicting with the server side validation of password field during new account sign up at `https://app.legalrobot.com/sign-in`. When you start typing in password field, it says `Passwords must be more than 8 characters` but when you type more than 8 characters with valid combinations of letters, numbers, symbols etc, still it doesn't validate properly and it says, `Please fix this field.` even when complexity is fair enough. When you type in 11 characters, then only it takes password as valid. I think you should either change the message or validate the password field properly. Also, same problem when login ! Thanks Ashish
Actions
View on HackerOne
Report Stats
  • Report ID: 265863
  • State: Closed
  • Substate: resolved
  • Upvotes: 5
Share this report