writeups.xyz / [Twitter Bug Bounty] Misconfigured JSON endpoint on ads.twitter.com lead to Access control issue and Information Disclosure of role privileged users.

Submitter : c2a

Date: 10 August 2018

Bounty : 280

Vulnerabilities :

• Broken Authorization
• Information Disclosure

Programs :

• Twitter

Authors :

• Peerzada Fawaz Ahmad Qureshi

Link :
https://web.archive.org/web/20191219011242/https://medium.com/@zk34911/twitter-bug-bounty-misconfigured-json-endpoint-on-ads-twitter-com-2771ec83a82