> JapanHacked_
[Resolved][Severity: Moderate][Unknown]

KLab: a mass of requests hit KLab ID, and about 520,000 confirmation emails were sent to the addresses of unspecified non-members

Mass access to the signup confirmation function sent about 520,000 spam emails. No leak was confirmed.

Disclosed

2021-07-23

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. From around 22:00 until around 00:42 the next day, the signup confirmation function of KLab ID received a mass of requests from outside, and confirmation emails were sent to unspecified addresses. [1]

  2. It announced the case and said it strengthened the function to prevent a recurrence. [1]

Impact

About 520,000 confirmation emails were sent as spam to addresses of non-members. No leak of member information was announced. [1]

Timeline

  1. Started 2021-07-21
  2. Disclosed 2021-07-23
  3. 2 days

Attack or cause

Method
[Unknown]
Impact
Entry point
Web app

Data exposed or at risk

–

Organizations involved

Open in organization search

Sources

  1. [1][News]KLab IDに外部から大量の不正アクセス、約52万件の確認メールを送信ScanNetSecurity · 2021-07-30 08:00