Loading HuntDB...

fix bug in username restriction

Medium
G
Gratipay
Submitted None
Reported by a5tronaut

Vulnerability Details

Technical details and impact analysis

Violation of Secure Design Principles
**Desciption:** Username `1.0-payout` is not restricted. **POC URL:** Visit https://gratipay.com/1.0-payout/ and you will end up at my profile page. Regards Uttam

Report Details

Additional information and metadata

State

Closed

Substate

Resolved

Submitted

Weakness

Violation of Secure Design Principles