writeups.xyz / Unauthenticated user can upload an attachment at HackerOne

Submitter : c2a

Date: 24 December 2018

Bounty : undisclosed

Vulnerabilities :

• Broken Authorization

Programs :

• HackerOne

Authors :

• Ahamed Morad (@Modam3r5)

Link :
https://medium.com/@modam3r5/unauthenticated-user-can-upload-an-attachment-at-hackerone-aff2a0c573b8