Hacker News
new
|
past
|
comments
|
ask
|
show
|
jobs
|
submit
login
EdOverflow
on March 14, 2018
|
parent
|
context
|
favorite
| on:
ASP.NET Core Elevation Of Privilege Vulnerability
This sounds like something along the lines of password reset poisoning as described in James Kettles' technical write-up "Practical HTTP Host header attacks". [1]
[1]:
http://www.skeletonscribe.net/2013/05/practical-http-host-he...
.
Consider applying for YC's Fall 2025 batch! Applications are open till Aug 4
Guidelines
|
FAQ
|
Lists
|
API
|
Security
|
Legal
|
Apply to YC
|
Contact
Search:
[1]: http://www.skeletonscribe.net/2013/05/practical-http-host-he....