Panther Labs · Report #1379910
Broken subdomain takeover of runpanther which was pointing towards herokuapp
Validstatus
mediumseverity
21upvotes
13 Nov 2021disclosed
Summary
An outdated link on our public blog pointed to a decommissioned Slack sign-up app hosted on Heroku for our also-decommissioned open source Slack community. The reporter was able to re-register the decommissioned subdomain with his own Heroku account.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.