Bypass Email Verification in Customer Portal
该报告还没有中文解读。
原文摘录
摘自原文（958 字符中的一小部分）
Hi team hope you doing well :) i found a vulnerability [ OTP Bypass ] on [ https://portal.test.cloud.mattermost.com ] . Summery : I was able to use the otp that was sent to victim email and i used it in the attacker's email verify .when i tried this issue first time the server log me out , and …
默认不展示报告全文。以上为简短摘录，完整复现过程请阅读原文。版权归研究员与 Mattermost 所有。
时间线
- 报告提交
- 公开披露
阅读 HackerOne 原文 ↗作者 @0dx · 版权归作者与 Mattermost 所有