writeups.xyz / A tale of critical account take over

Submitter : c2a

Date: 10 July 2020

Bounty : undisclosed

Vulnerabilities :

• Account Takeover
• Exposed JWT Generation Endpoint
• JWT

Programs :

• Undisclosed

Authors :

• Shivam Pandey (@Shivam31200)

Link :
https://medium.com/@sp2417487/a-tale-of-critical-account-take-over-e1b7c180917c