writeups.xyz / Hacking Swagger-UI - from XSS to account takeovers

Submitter : c2a

Date: 16 May 2022

Bounty : undisclosed

Vulnerabilities :

• DOM XSS
• Account Takeover

Programs :

• Shopify
• Paypal
• GitLab
• Atlassian
• Yahoo! / Verizon Media
• Microsoft
• Jamf

Authors :

• Dawid Moczadło (@Kannthu1)

Link :
https://www.vidocsecurity.com/blog/hacking-swagger-ui-from-xss-to-account-takeovers/