writeups.xyz / Hacking Chess.com and Accessing 50 Million Customer Records

Submitter : c2a

Date: 11 February 2021

Bounty : undisclosed

Vulnerabilities :

• Reflected XSS
• Information Disclosure
• Account Takeover

Programs :

• Chess.com

Authors :

• Sam Curry (@Samwcyo)

Link :
https://samcurry.net/hacking-chesscom/