writeups.xyz / CRLF injection allow => cookie injection in root domain & xss

Submitter : c2a

Date: 6 August 2019

Bounty : undisclosed

Vulnerabilities :

• CRLF Injection

Programs :

• Bukalapak

Authors :

• Abdelhak Kharroubi

Link :
https://medium.com/@protostar0/crlf-injection-allow-cookie-injection-in-root-domain-xss-812cd807ba5b