Email Not Completely Deleted after Deleting an account
S
Semmle
Submitted None
Actions:
Reported by
0xspade
Vulnerability Details
Technical details and impact analysis
**Description:**
If one of the user deletes their account it should be fully deleted in account while semmle doesnt delete it completely.
## Steps To Reproduce:
* Register email1
* After registering, confirm your account.
* once email1 is confirmed. add another email which we will name as email2
* Now Verify the email of email2.
* Delete account of email1 completely
* Now register email2
* after registering email2, confirm the account of email2
* after confirming with the link given in email2 it will automatically logged in and you will notice that email1 and email2 is in there and no need confirmation for email1.
**Fix/Remediation**
As per the rules, once you delete your data in an account it should be completely deleted. it should be another life for an account.
## Impact
User know that after deleting account to semmle, their data will be lost to semmle's database however, it still there which is a privacy violation.
Report Details
Additional information and metadata
State
Closed
Substate
Informative
Submitted
Weakness
Privacy Violation