writeups.xyz / A supply-chain breach: Taking over an Atlassian account

Submitter : c2a

Date: 24 June 2021

Bounty : undisclosed

Vulnerabilities :

• XSS
• CSRF

Programs :

• Atlassian

Authors :

• Dikla Barda, Yaara Shriki
• Roman Zaikin (@R0m4nZ41k1n)
• Oded Vanunu (@Od3dV)

Link :
https://research.checkpoint.com/2021/a-supply-chain-breach-taking-over-an-atlassian-account/