writeups.xyz / A Classical Account Takeover Case via Multiple Bypasses

Submitter : c2a

Date: 26 June 2023

Bounty : undisclosed

Vulnerabilities :

• Account Takeover
• Password Reset
• Host Header Injection
• URL Validation Bypass

Programs :

• Undisclosed

Authors :

• Kamil Onur Özkaleli (@Ko2sec)

Link :
http://www.kamilonurozkaleli.com/posts/a-classical-account-takeover-case-via-multiple-bypasses/