Race Condition leads to undeletable group member

Program: hackerone Bug Type: Race condition Bounty: Unspecified Date: 2019-06-09
race-condition

Summary

The researcher found race condition vulnerability where a user could be added twice to a group he is already part of. This could prevent the group creator from kicking out the newely created user.

References