Panther Labs · Report #1117079
Broken Link Hijacking on Twitter link
Validstatus
mediumseverity
61upvotes
22 Apr 2021disclosed
Summary
Our website was not updated to include our new twitter handle, and resulted in pointing to an old one that we disavowed. As a result, the bug bounty participant was able to register that Twitter handle and could have masqueraded as us. Not an actual security vulnerability or exploitation, but a mistake that was worth addressing and rewarding for.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.