Cobalt Vulnerability Wiki

V3 - Session Management

Password Reset Token Sent Over HTTP

POC

Intercept the requests while resetting password
Observe that the password reset token is sent over HTTP.

Impact

Low

Likelihood

Low

Ready to get started?

Schedule a Demo

Join some of these great clients we’re proud to have helped