Repository navigation
User Enumeration possible on passwordReset endpoint #5102
Description
When posting to the requestPasswordReset endpoint, parse-server will return a
Parse.Error(Parse.Error.EMAIL_NOT_FOUND, `No user found with email ${email}.`);
A description of the issue can be found here: https://www.owasp.org/index.php/Testing_for_User_Enumeration_and_Guessable_User_Account_(OWASP-AT-002)
Activity