Hacktivity
Every decision, on the record.
Resolved, duplicate and informative alike. Triage time and time-to-bounty are shown per report, because a platform that hides its misses is not measuring anything.
Disclosed
1
Paid in this view
$665k
Filtered by @kestrel_0x ×
- criticalPGN-10471
Password reset email array accepts two recipients when body is sent as JSON
The form-encoded reset endpoint also accepted JSON; an array value for email delivered the reset link to both addresses. Victim account was a second researcher account.
$24,000Resolved
Hacktivity
Connecting- Password reset email array accepts two recipients when body is sent as JSONcritical$24k