Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

successful user registration from email outside of domain list #3

Closed
bdolor opened this issue Mar 9, 2017 · 2 comments
Closed

successful user registration from email outside of domain list #3

bdolor opened this issue Mar 9, 2017 · 2 comments

Comments

@bdolor
Copy link
Contributor

bdolor commented Mar 9, 2017 •
edited
Loading

Early this morning there were two successful user registrations that by-passed the check for domains during a sign up event. The domains used were mail.ru and wugjeyxwgv.pl.

IP 114.37.245.67 is located in Taiwan
IP 191.101.65.167 is located in Germany
@bdolor
Copy link
Contributor Author

bdolor commented Mar 9, 2017

To clarify, though there is no requirement for a subscriber to have an email from within the domain list, though this highlights what other safeguards could be put in place to make it more difficult for spam users to gain access, then through privilege escalation cause havoc.

@bdolor bdolor mentioned this issue Mar 14, 2017
Closed
@bdolor
Copy link
Contributor Author

bdolor commented May 16, 2018

issue will be addressed in #14

@bdolor bdolor closed this as completed May 16, 2018
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@bdolor