Loading HuntDB...

2nd issue>>> flood of email no rate limit on delete account confirmation email >>

Low
W
Weblate
Submitted None

Team Summary

Official summary from Weblate

There was no rate limit on delete account confirmation email, leading to user being able to send (himself) flood of emails.

Reported by code_monkey

Report Details

Additional information and metadata

State

Closed

Substate

Resolved

Submitted

Weakness

Violation of Secure Design Principles