writeups.xyz / Exploiting CORS Misconfigurations

Submitter : c2a

Date: 26 November 2022

Bounty : undisclosed

Vulnerabilities :

• CORS Misconfiguration
• CSRF
• XST

Programs :

• Apple
• Google
• Mozilla (Firefox)
• WHATWG

Authors :

• Scarlet / Attack Ships on Fire

Link :
https://attackshipsonfi.re/p/exploiting-cors-misconfigurations