🎯 New Report #3987499: Client-Side Denial of Service (DoS) via Memory Exhaustion on Password Reset Endpoint
🔺Severity: High
👽 Reporter: letx world
⭐️ Reputation: 102
🛠 State: resolved
💼 Team: Khan Academy
💵 Bounty: null
🕐 Submitted: 2026-09-01
⏰ Disclosed: 2026-10-05 02:23:43
📝 Summary: A client-side denial of service vulnerability was identified on a password reset endpoint. When the endpoint was accessed by an authenticated user, the browser automatically generated thousands of requests without user interaction, resulting in rapid memory exhaustion. The browser became unresponsive and crashed within minutes as memory usage continuously increased.
📂 Report JSON File: 3987499
@hackeronereports