writeups.xyz / Chaining IDOR and Host Header can takeover 18 Billion of users account

Submitter : c2a

Date: 26 January 2024

Bounty : undisclosed

Vulnerabilities :

• IDOR
• Host Header Injection
• Password Reset
• Account Takeover

Programs :

• Undisclosed

Authors :

• Sahil Mehra (@Nullr3x)

Link :
https://nullr3x.medium.com/chaining-idor-and-host-header-can-takeover-18-billion-of-users-account-3f0c3fdbc29b