Pain point · Permissions & security · Causes churn
Unverified email addresses can be used to create Zendesk accounts
1 source thread · first seen 2018-10
Summary
The post describes creating a Zendesk account with a target's support address without verifying ownership, which exposed confirmation emails and enabled access to the target's Slack account.
- Affects
- Companies using Zendesk to receive support requests
Evidence
Excerpts are copied word for word from the source; follow the link to read it in full.
“He could do this because Zendesk doesn't require email verification”