writeups.xyz / ATO via Host Header Poisoning

Submitter : c2a

Date: 8 October 2020

Bounty : 2,000

Vulnerabilities :

• Host Header Injection
• Account Takeover
• Password Reset

Programs :

• Undisclosed

Authors :

• Shivam Kamboj Dattana (@Sechunt3r)

Link :
https://medium.com/@sechunter/ato-via-host-header-poisoning-dc5c29d2fd0d