writeups.xyz / Account takeover via postMessage

Submitter : c2a

Date: 5 June 2020

Bounty : 1,500

Vulnerabilities :

• Account Takeover
• PostMessage

Programs :

• Undisclosed

Authors :

• Socket (@Yxw21)

Link :
https://yxw21.github.io/2020/06/05/Account-Takeover-Via-PostMessage/