Bumble · Report #746186
Leak of authorization urls leads to account takeover
Validstatus
109upvotes
8 May 2020disclosed
Summary
The researcher was able to pass verification to another account by finding confirmation data in response from the server.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.