Snapchat · Report #269109
Subdomain Takeover via unclaimed UserVoice domain
Validstatus
highseverity
$250bounty
18upvotes
4 Oct 2017disclosed
Summary
@benocular found a bitstripsforschools CNAME entry pointing to an unclaimed UserVoice domain, which could be taken over by an external party.
The CNAME entry was for a product that is no longer active.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.