Hi Perchance team,

I believe I have found a potential authentication/security vulnerability involving the Perchance login state and browser local storage.

I can reproduce the issue reliably, but I don’t want to publicly disclose the reproduction steps or exploit details.

Could someone from the Perchance team please provide a private channel where I can send the full vulnerability report and reproduction steps?

Regards, Kowsik Y

  • perchanceMEnglish
    5·
    5 days ago

    Hi, thanks, you can DM me here on lemmy by clicking my username and then clicking the “Send message” button on my profile page.

    • ReportEnglish
      1·
      4 days ago

      How do we see a response or verify if you have read our DMs?

      • RudBoEnglish
        1·
        4 days ago

        I think the comment plugin updated so the dev read it.

          • RudBoEnglish
            1·
            3 days ago

            there’s changes so I think your concern is read and improved, just a guess.