No email verification during registration

Disclosed: 2015-09-28 15:49:01 By b35489bca2c22d7a8392a3c To owncloud
Unknown
Vulnerability Details
When you register for a new account, there is no verification link sent to the email for confirmation. The account is directly activated and can be used without confirming the email. This is vulnerable as anyone can use anyone's email without verification. and one with valid email owner cant signup with his own email as someone else already took it before him.
Actions
View on HackerOne
Report Stats
  • Report ID: 90643
  • State: Closed
  • Substate: informative
  • Upvotes: 3
Share this report