A password reset page does not properly validate the authenticity token at the server side.

Disclosed: 2014-04-19 20:59:39 By niks To security
Unknown
Vulnerability Details
1. Go to https://hackerone.com/users/password/new and request a new password. 2. go to email, and click on the link. 3. put the new password, submit and intercept the request; remove the authenticity token from the request and now forward it to the server. 4. you will see request still got completed and user logged in. The token did not verify on the server side.
Actions
View on HackerOne
Report Stats
  • Report ID: 742
  • State: Closed
  • Substate: resolved
  • Upvotes: 7
Share this report