🎯 New Report #3356149: 2FA requirement bypass when inviting team members
🔺Severity: Medium
👽 Reporter: 0x7ashish
⭐️ Reputation: 117
🛠 State: resolved
💼 Team: Omise
💵 Bounty: null
🕐 Submitted: 2025-09-24
⏰ Disclosed: 2026-02-28 20:55:04
📝 Summary: The application's requirement for users to enable 2FA before sending team invitations was bypassed by modifying client-side responses. This allowed invitations to be sent without enabling 2FA, defeating the security requirement.
📂 Report JSON File: 3356149
@hackeronereports