writeups.xyz / Full Account Takeover through CORS with connection Sockets

Submitter : c2a

Date: 25 January 2018

Bounty : undisclosed

Vulnerabilities :

• CORS Misconfiguration
• Account Takeover

Programs :

• Undisclosed

Authors :

• Samuel (@Saamux)

Link :
https://medium.com/@saamux/full-account-takeover-through-cors-with-connection-sockets-179133384815