writeups.xyz / Full Account Takeover via Changing Email And Password of any User through API Parameters

Submitter : c2a

Date: 26 July 2019

Bounty : undisclosed

Vulnerabilities :

• IDOR
• Password Reset
• Account Takeover

Programs :

• Undisclosed

Authors :

• Adesh Nandkishor Kolte (@AdeshKolte)

Link :
https://web.archive.org/web/20201008153910/https://medium.com/@adeshkolte/full-account-takeover-changing-email-and-password-of-any-user-through-api-parameters-3d527ab27240