writeups.xyz / Weird functionality leads to Account Takeover (Millions of Users affected)

Submitter : c2a

Date: 27 January 2021

Bounty : 4,000

Vulnerabilities :

• Account Takeover
• Broken Authentication

Programs :

• Undisclosed

Authors :

• Sahil Mehra (@Nullr3x)

Link :
https://nullr3x.medium.com/weird-functionality-leads-to-account-takeover-millions-of-users-affected-3fdf06be45