writeups.xyz / Privilege Escalations through Integrations

Submitter : c2a

Date: 4 May 2023

Bounty : undisclosed

Vulnerabilities :

• Privilege Escalation
• Amazon Cognito Misconfiguration
• JWT
• Account Takeover

Programs :

• Undisclosed

Authors :

• Colin McQueen

Link :
https://blog.stratumsecurity.com/2023/05/04/integration-fails/