Loading HuntDB...

Spoof Email with Hyperlink Injection via Invites functionality

Low
P
Pushwoosh
Submitted None

Team Summary

Official summary from Pushwoosh

Email Spoofing via hyperlink injection. Design Issue, Missing Best Practice, Low severity.

Reported by japz

Report Details

Additional information and metadata

State

Closed

Substate

Resolved

Submitted

Weakness

Violation of Secure Design Principles