writeups.xyz / BMW Bug Bounty – Account Verification Bypass writeup

Submitter : c2a

Date: 26 January 2021

Bounty : undisclosed

Vulnerabilities :

• OTP Bypass
• Bruteforce
• Lack of Rate Limiting

Programs :

• BMW

Authors :

• Pethuraj (@Pethuraj)

Link :
https://www.pethuraj.com/blog/bmw-bugbounty-writeup/