Description

Adding SSH key is a sensitive action . As the application triggers a notification on all sensitive actions like email change/password reset , SSH key is also an important security feature to be notified about

Proof of Concept

1) Go to https://rdiffweb-dev.ikus-soft.com/prefs/sshkeys
2) Do all necessary steps to successfully add a SSH key
3) Check the inbox of your registered email
4) You will notice that there is no notification triggered on this security endpoint 





# Impact

In case an attacker is able to add SSH key in any means , user will remain unaware of this change which raises a security concern