writeups.xyz / Tokopedia Account Takeover Bug Worth 8 Million IDR

Submitter : c2a

Date: 24 December 2018

Bounty : undisclosed

Vulnerabilities :

• Password Reset
• Account Takeover

Programs :

• Tokopedia

Authors :

• Mukul Lohar (@Ironfisto)

Link :
https://medium.com/@ironfisto/tokopedia-account-takeover-bug-worth-8-million-idr-5474cb5b5cc9