Starbucks · Report #570651
Subdomain takeover of mydailydev.starbucks.com
Validstatus
highseverity
122upvotes
22 May 2019disclosed
Summary
A subdomain of starbucks.com had a CNAME record pointing to an Azure Traffic Manager profile that @0xpatrik was able to claim.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.