jonny (nonvenomous) on Nostr: just cornered and reproduced a bug where denying a user approval request actually ...

just cornered and reproduced a bug where denying a user approval request actually approves the request, triggerable by any binary due to other unpatched but reported vulnerabilities, so with that i'm going to bed and going to submit another 130k tier account takeover bug report tomorrow because due to EVEN OTHER unpatched but reported vulnerabilities every vuln of this kind can be escalated to account takeover.