eval.blog

Account Takeover on unverified emails in File Sync & Share in Acronis

Reported an account takeover vulnerability that allows an attacker to claim accounts having unverified emails in File Sync & Share in Acronis.

References:

  • https://hackerone.com/reports/906790