writeups.xyz / Exploiting CORS to perform an IDOR Attack leading to PII Information Disclosure

Submitter : c2a

Date: 1 March 2021

Bounty : undisclosed

Vulnerabilities :

• CORS Misconfiguration
• Information Disclosure

Programs :

• Undisclosed

Authors :

• Harsh Parekh (@Notmarshmllow)

Link :
https://notmarshmllow.medium.com/exploiting-cors-to-perform-an-idor-attack-leading-to-pii-information-disclosure-95ef21ecf8ee