writeups.xyz / Hijacking Reset Password Link in https://www.niteflirt.com/ via Host Header Poising (Write Up)

Submitter : c2a

Date: 25 February 2021

Bounty : 50

Vulnerabilities :

• Host Header Injection
• Account Takeover
• Password Reset

Programs :

• Niteflirt

Authors :

• Evan Ricafort (@Evanricafort)

Link :
https://blog.evanricafort.com/2021/02/hijacking-reset-password-link-in.html