Algolia · Report #673273
subdomain take over at recommendation.algolia.com
Validstatus
mediumseverity
27upvotes
14 Aug 2019disclosed
How it was found
Description
hello sir, your subdomain recommendation.algolia.com cname is recommendation.us and recommendation.us is for sell which can lead to subdomain take over
steps to reproduce
- check the cname of recommendation.algolia.com
- see that the cname "recommendation.us" is for sell using lookup tool
poc:
{F555251}
Impact
Attackers are able to purchase recommendation.us then they will be able to takeover recommendation.algolia.com and post porn pictures or phishing forums