writeups.xyz / Compromising Honda’s power equipment / marine / lawn & garden dealer eCommerce platform through a vulnerable password reset API

Submitter : c2a

Date: 6 June 2023

Bounty : undisclosed

Vulnerabilities :

• Password Reset
• Broken Access Control
• Account Takeover

Programs :

• Honda

Authors :

• Eaton Z. (@XeEaton)

Link :
https://eaton-works.com/2023/06/06/honda-ecommerce-hack/