writeups.xyz / Authenticated CORS with Access-Control-Allow-Origin: *

Submitter : c2a

Date: 15 November 2019

Bounty : undisclosed

Vulnerabilities :

• Caching Issue
• Browser Hacking

Programs :

• Google (Chromium)

Authors :

• BitK (@BitK_)

Link :
https://web.archive.org/web/20220826045457/https://blog.bi.tk/chrome-cors/