Snapchat: Subdomain Takeover via unclaimed UserVoice domain

2017-09-17T21:17:32
ID H1:269109
Type hackerone
Reporter benoculars
Modified 2017-10-04T11:25:04

Description

@benocular found a bitstripsforschools CNAME entry pointing to an unclaimed UserVoice domain, which could be taken over by an external party.

The CNAME entry was for a product that is no longer active.