Account Restore / Reactivating an old email via old reset link

Disclosed: 2018-08-27 19:07:44 By footstep To weblate
Unknown
Vulnerability Details
Hi, I noticed you now send a confirmation link after loading the reset link, below is a screenshot showing the email and highlighting the error. {F227060} Best Regards, @footstep
Actions
View on HackerOne
Report Stats
  • Report ID: 275303
  • State: Closed
  • Substate: resolved
  • Upvotes: 4
Share this report