3 ms·
Why wait and not use it right away? If you have read access now you can exploit now.
by homakov 12y ago
Why wait and not use it right away? If you have read access now you can exploit now.
- grey-area 12y agoOh I see - you mean they have read access, then trigger password reset, then use the token straight away? That does mean they'd be firing off emails which would alert users though.
- homakov 12y agoIt would. They didn't do it probably because they didn't try this trick. But they could i think.