writeups.xyz / [$5K] Misconfigured Reset password that leads to Account Takeover (No user Interaction ATO)

Submitter : c2a

Date: 24 August 2021

Bounty : 5,000

Vulnerabilities :

• Account Takeover
• Password Reset
• Information Disclosure

Programs :

• Undisclosed

Authors :

• Aditya Sharma (@Assass1nmarcos)

Link :
https://medium.com/@noob.assassin/5k-misconfigured-reset-password-that-leads-to-account-takeover-no-user-interaction-ato-e6a36b8ef183