writeups.xyz / IDOR vulnerability on invoice and weak password reset leads to account take over

Submitter : c2a

Date: 1 February 2022

Bounty : undisclosed

Vulnerabilities :

• IDOR
• Password Reset
• Account Takeover
• Payment Tampering
• Logic Flaw

Programs :

• Undisclosed

Authors :

• Damaidec

Link :
https://medium.com/@damaidec/idor-vulnerability-on-invoice-and-weak-password-reset-leads-to-account-take-over-603b42143a8c