writeups.xyz / Bug Bounty Adventures: A NodeBB 0-day

Submitter : c2a

Date: 25 March 2022

Bounty : undisclosed

Vulnerabilities :

• CSRF
• Account Takeover
• SSO
• Broken Authentication

Programs :

• Opera

Authors :

• Marouane Mouhtadi (@Mar0_0uane)

Link :
https://blogs.opera.com/security/2022/03/bug-bounty-adventures-a-nodebb-0-day/