WRITEUP #4250
Chaining password reset link poisoning, IDOR, and information leakage to achieve account takeover at api.redacted.com
OtherHTTP header injection
by@mase289(Jadek Mark)
Program
-
Published
Nov 10, 2020
Added to HackDex
Sep 15, 2022
Read Full Writeuphttps://medium.com/bugbountywriteup/chaining-password-reset-link-poisoning-idor-account-information-leakage-to-achieve-account-bb5e0e400745