writeups.xyz / I Obtained ADMIN access via the Account Activation link [In 30 seconds]

Submitter : c2a

Date: 20 May 2022

Bounty : undisclosed

Vulnerabilities :

• Privilege Escalation
• Amazon Cognito Misconfiguration

Programs :

• Undisclosed

Authors :

• Popalltheshells

Link :
https://systemweakness.com/i-obtained-admin-access-via-account-activation-link-in-30-seconds-dd7f115ae1d2