writeups.xyz / Cors Blimey: The power of chaining CORS

Submitter : c2a

Date: 17 May 2020

Bounty : undisclosed

Vulnerabilities :

• CORS Misconfiguration
• Stored XSS
• CSRF

Programs :

• Undisclosed

Authors :

• Hazana (@HazanaSec)

Link :
https://web.archive.org/web/20200616051351/https://hazana.xyz/posts/cors-blimey/