Account takeover by changing email
该报告还没有中文解读。
原文摘录
摘自原文（1204 字符中的一小部分）
The endpoint `/signup/email` allows users to change their email before they confirm their account email. This endpoint is not protected from CSRF. Thus, any account that is not yet "confirmed" is vulnerable to account takeover using the following steps: 1. Attacker obtains new email address not …
默认不展示报告全文。以上为简短摘录，完整复现过程请阅读原文。版权归研究员与 Khan Academy 所有。
时间线
- 报告提交
- 公开披露
阅读 HackerOne 原文 ↗作者 @tomoh · 版权归作者与 Khan Academy 所有