writeups.xyz / Don't Trust the Host Header for Sending Password Reset Emails

Submitter : c2a

Date: 13 December 2017

Bounty : 1,500

Vulnerabilities :

• Password Reset
• Account Takeover

Programs :

• Mavenlink

Authors :

• Jack Cable (@Jackhcable)

Link :
https://lightningsecurity.io/blog/host-header-injection/