Loading HuntDB...

multiple email usage -my.stripo.email-

Medium
S
Stripo Inc
Submitted None

Team Summary

Official summary from Stripo Inc

I first went to the "my.stripo.emai" view and registered with my google account. Then I entered the profile. I have replaced my email with an email that is not registered with your google account.I received a verification message on the email I changed. The button was not clicked. I copied it by right-clicking and went to the link.my e-mail was successfully changed but I was still able to access my email from my google account.

Reported by rickiex

Report Details

Additional information and metadata

State

Closed

Substate

Resolved

Submitted

Weakness

Improper Access Control - Generic