Missing Server Side Rate Limiting can Lead to VK Account Take over
V
VK.com
Submitted None
Team Summary
Official summary from VK.com
Insufficient flood control.
Actions:
Reported by
mkap
Report Details
Additional information and metadata
State
Closed
Substate
Resolved
Bounty
$400.00
Submitted
Weakness
Violation of Secure Design Principles