description: Due to a bug in the the default sign in functionality in the keystone node module before 0.3.16, incomplete email addresses could be matched. A correct password is still required to complete sign in.
problem types: Improper Authentication
affected:
{
product: keystone node module
vendor: HackerOne
versions:
status: affected, version: <0.3.16
}