Comma-based Bypass Vulnerability in Sandstorm Organization Restriction

CVE-2017-6199 · HIGH Severity

AV:N/AC:L/AU:N/C:P/I:P/A:P

A remote attacker could bypass the Sandstorm organization restriction before build 0.203 via a comma in an email-address field.

Learn more about our Web Application Penetration Testing UK.