Any user can completely delete their own account without authorization and/or going through any kind of membership cancellation protocol.

Disclosed: 2018-09-12 14:40:16 By s3cur3 To shipt

Low

Vulnerability Details

No vulnerability description provided or it is restricted.

Actions

View on HackerOne

Report Stats

Report ID: 317507
State: Closed
Substate: resolved
Upvotes: 14

Share this report