writeups.xyz / thisclosed_#1 - Full Account Takeover of ANY user via Insecure Direct Object Reference (IDOR) on reset password functionality

Submitter : c2a

Date: 4 January 2022

Bounty : undisclosed

Vulnerabilities :

• IDOR
• Password Reset
• Account Takeover

Programs :

• Undisclosed

Authors :

• Samuele Gugliotta (@Indevi0us)

Link :
https://blog.hckrt.com/blog/thisclosed_1/