search

blackMisay / Janmos

MIT License
1 stars 0 forks source link

Case Sensitivity Vulnerability: Login accepted with correct username regardless of case #41

Open blackMisay opened 3 months ago

blackMisay commented 3 months ago

There is a login issue allowing users with the correct username but different casing to access the system.

Steps to recreate:

  1. Provide the correct username and password in the login form, but use a different character casing for the username. e.g. AdMin, ADMIN, aDmIn, etc.
blackMisay commented 3 months ago

This task did not reach completion before the deadline. I will move this ticket to the 2024.04.2 Sprint.