writeups.xyz / Bypassing Firebase authorization to create custom goo.gl subdomains

Submitter : c2a

Date: 21 September 2018

Bounty : undisclosed

Vulnerabilities :

• Logic Flaw
• IDOR

Programs :

• Google

Authors :

• Thomas Orlita (@ThomasOrlita)

Link :
https://websecblog.com/vulns/bypassing-firebase-authorization-to-create-custom-goo-gl-subdomains/