writeups.xyz / Chains on Chains: Chaining multiple low-level vulns into a Critical.

Submitter : c2a

Date: 26 September 2020

Bounty : undisclosed

Vulnerabilities :

• Blind XSS
• CSP Bypass
• Lack of Rate Limiting
• Exposed JWT Generation Endpoint
• JWT

Programs :

• Undisclosed

Authors :

• Daniel Marte (@Masonhck3571)

Link :
https://medium.com/@masonhck357/chains-on-chains-chaining-multiple-low-level-vulns-into-a-critical-8b88db29738e