writeups.xyz / Watch your requests! Open redirect to a complete account takeover

Submitter : c2a

Date: 5 October 2020

Bounty : undisclosed

Vulnerabilities :

• Path Traversal
• Open Redirect
• SSRF
• Account Takeover

Programs :

• Undisclosed

Authors :

• Suraj Disoja (@Ninetyn1ne_)

Link :
https://ninetyn1ne.github.io/2020-10-05-open-redir-to-ato/