Subdomain Takeover on delivey.yelp.com

How it was found

Summary:

[Subdomain takeover vulnerabilities occur when a subdomain (delivery.yelp.com) is pointing to a service] Vulnerable url : delivery.yelp.com This is an verify Link. {F1959331}

Platform(s) Affected:

[website ]

Steps To Reproduce

1. [Create the Amazon S3 Bucket on this Name : delivery.yelp.com] {F1959320}
2. [then Upload the Attacker HTML web page]
3. [then using Static Web hosting ]

Supporting Material/References:

{F1959332}

Remediation Remove the cname entry or claim the subdomain delivey.yelp.com on amazon aws

Impact

Risk fake website malicious code injection users tricking company impersonation This issue can have really huge impact on the companies reputation someone could post malicious content on the compromised site and then your users will think it's official but it's not.

Best Regards, Racer Saravanaa 05