BATIST://writeup
Example Target: example.com
Severity: High / Critical
Category: Authentication • Identity Management • Account Security
The platform allowed users to create accounts using any email address without verifying ownership. No confirmation email was required after signup, and the password recovery system did not send reset emails.
This enabled a pre-registration attack where an attacker could register an account using another person’s email address before the legitimate owner.
An attacker registers using a victim’s email address. The account is created immediately without email verification. When the real owner later tries to register, the email is already marked as used.
If the victim attempts password recovery, no reset email is received. As a result, the legitimate user cannot register, login, or recover the account.