You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
It is possible to enumerate valid accounts within the application by attempting to sign up with an already used email address. Display 'We have sent you an email to validate your registration', validate registration if not registered, offer a password reset if already registered. :)
馃敩 How To Reproduce
Steps to reproduce the behavior:
...
Code sample
Environment
Where are you running/using Password Pusher?
pwpush.com
Docker Image
pwpush
custom image
Heroku
Digital Ocean
Microsoft Azure
Google Cloud
AWS
Source Code
Other (please specify)
If applicable, what version of Password Pusher?
Screenshots
馃搱 Expected behavior
馃搸 Additional context
The text was updated successfully, but these errors were encountered:
馃悰 Bug Report
Reported by a community user via email:
It is possible to enumerate valid accounts within the application by attempting to sign up with an already used email address. Display 'We have sent you an email to validate your registration', validate registration if not registered, offer a password reset if already registered. :)
馃敩 How To Reproduce
Steps to reproduce the behavior:
Code sample
Environment
Where are you running/using Password Pusher?
If applicable, what version of Password Pusher?
Screenshots
馃搱 Expected behavior
馃搸 Additional context
The text was updated successfully, but these errors were encountered: