writeups.xyz / Rendezvous with a Chatbot: Chaining Contextual Risk Vulnerabilities

Submitter : c2a

Date: 11 May 2023

Bounty : undisclosed

Vulnerabilities :

• Chatbot
• Websockets
• Cross-Site WebSocket Hijacking (CSWH)
• Captcha Bypass

Programs :

• Undisclosed

Authors :

• Abeer Banerjee (@Bugasur)

Link :
https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/rendezvous-with-a-chatbot-chaining-contextual-risk-vulnerabilities/