prologin / concours-site

Source code of the Prologin contest website
https://gitlab.com/prologin/concours/site
GNU General Public License v3.0
10 stars 6 forks source link

Unsecured Matrix homeserver on subdomain #361

Closed austinhuang0131 closed 2 years ago

austinhuang0131 commented 2 years ago

There seems to be a Matrix homeserver at matrix.prologin.org that allows anyone to register on.

If that is not intended, you should fix it, as it can be easily abusable to create spam accounts.

lportemo commented 2 years ago

Hello,

The matrix server running on matrix.prologin.org only allows registration if the account is created with a confirmed @prologin.org email address.

austinhuang0131 commented 2 years ago

Understood.

lportemo commented 2 years ago

Moreover, GItHub is not the right way to report security issues. If you want to report security problems you must contact soc@prologin.org