CORS Misconfiguration / Broken Access Control
HackerOneMyndr2026-09-10
Web
Not rated
BUG BOUNTY WRITEUPS
CORS misconfiguration writeups
CORS policies that trust the wrong origins and let other sites read authenticated responses.
8 reports and writeups from 2024 to 2026. 2 carry a severity from the disclosing platform, 1 of them rated High or Critical. Last updated 2026-10-30.
Latest CORS misconfiguration reports
Search and filter all writeupsMyndr CORS Misconfiguration
HackerOneMyndr2026-08-12
Web
Not rated
Unauthenticated File Upload with CORS Wildcard and No Rate Limiting on ████████ and ████████
HackerOneEssity2026-06-29
Web
High
We Need to Talk About CSRF Again
Researcher blog2026-05-08
Web
Not rated
My First Bug Bounty: CORS Misconfiguration
Medium2024-08-06$250 bounty
Web
Not rated
How I Got $5,000 for Out-of-Scope XSS
Medium2024-02-25$5,000 bounty
Web
Not rated
CORS Misconfiguration on █████
HackerOnePublitas2024-01-31
Web
Low
Bypassing browser tracking protection for CORS misconfiguration abuse
Researcher blogMozilla (Firefox), Apple (Safari)2024-01-25
Web
Not rated
Every entry links to the original report or article. Secure Hyperloop doesn't copy the content. Severity comes from the disclosing platform (HackerOne). Writeups without a platform rating show "Not rated". The index has 2,810 items in total.