hidden-parameters

1 article
sort: new top best
clear filter
0 5/10

Researcher discovered full account takeover vulnerability by chaining a missing CSRF token validation on the password change endpoint with a hidden 'uid' parameter discovered via Param Miner, allowing password changes for any user without authentication, resulting in a $1000 bounty.

Mohsin Khan Param Miner Burp Suite James Kettle
mokhansec.medium.com · kh4sh3i/bug-bounty-writeups · 19 hours ago · details