writeups.xyz / HubSpot Full Account Takeover in Bug Bounty

Submitter : c2a

Date: 11 February 2023

Bounty : undisclosed

Vulnerabilities :

• Account Takeover
• Hyperlink Injection
• Password Reset

Programs :

• HubSpot

Authors :

• Omar Hashem (@OmarHashem666)

Link :
https://omar0x01.medium.com/hubspot-full-account-takeover-in-bug-bounty-4e2047914ab5