writeups.xyz / Stealing cookies from subdomain leads to takeover user accounts at redacted.com

Submitter : c2a

Date: 27 March 2022

Bounty : undisclosed

Vulnerabilities :

• Account Takeover
• XSS

Programs :

• Undisclosed

Authors :

• Bijan Murmu (@0xBijan)

Link :
https://web.archive.org/web/20220329163747/https://pwnsec.ninja/2022/03/27/stealing-cookies-from-subdomain-leads-to-takeover-user-accounts-at-redacted-com/