Enjin · Report #1623672

Host header injection leads to account takeover

Duplicatestatus

highseverity

47upvotes

15 Oct 2024disclosed

Summary

@ndizon_ submitted a duplicate report illustrating it was possible to perform a Host header injection on the (now retired) Ethereum Cloud service.

The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original