writeups.xyz / How i found a 1500$ worth Deserialization vulnerability

Submitter : c2a

Date: 28 August 2018

Bounty : 1,500

Vulnerabilities :

• Misconfigured JSF ViewState
• Insecure Deserialization

Programs :

• Undisclosed

Authors :

• Ashish Kunwar (@D0rkerDevil)

Link :
https://medium.com/@D0rkerDevil/how-i-found-a-1500-worth-deserialization-vulnerability-9ce753416e0a