Insecure Invitation Link Handling

Summary: This report outlines a critical security vulnerability in the invitation link handling process of ''satismeter.com''. The issue allows unauthorized users to join an organization using invitation links sent to different email addresses. If exploited, this vulnerability can lead to …

{"operationName":"SignUp","variables":{"input":{"email":"[email protected]","link":null,"password":"wxxxxxxx","source":"invitation"}},"query":"mutation SignUp($input: SignUpInput!) {\n  auth {\n    signUp(input: $input)\n    __typename\n  }\n}"}