writeups.xyz / CORS Misconfiguration to Account TakeOver [Out of scope to grab items In-Scope]

Submitter : c2a

Date: 24 November 2019

Bounty : 1,500

Vulnerabilities :

• CORS Misconfiguration
• Open Redirect
• Reflected XSS
• Session Management Issue

Programs :

• Undisclosed

Authors :

• Mashoud1122 (@Mashoud1122)

Link :
https://medium.com/@mashoud1122/cors-misconfiguration-account-takeover-out-of-scope-to-grab-items-in-scope-66d9d18c7a46