Loading HuntDB...

limit number of images in statement

Medium
G
Gratipay
Submitted None
Reported by hogarth45

Vulnerability Details

Technical details and impact analysis

Violation of Secure Design Principles
Hello The use of the images in the statements `![](http://blackdoorsec.net:80/1 "HTTP") ` There appears to be no limit on how many can be inserted. On my own account "https://gratipay.com/~34534534fsfs/" I placed 100 Gratipay users could unknowingly become part of a DDoS attack against another site. I would recommend limiting the number of images that can be placed. Attached is a video of just a traffic counter being triggered by the page load.

Report Details

Additional information and metadata

State

Closed

Substate

Resolved

Bounty

$1.00

Submitted

Weakness

Violation of Secure Design Principles