$$$ Bounty | Insecure CORS Misconfiguration With Full Exploitation | Bug Bounty POC |

@Byte Blogger baseHow Many Members Waiting @krishnsec Methodology And Podcast

I want to ask impact of this because it is unauthenticated please reply

Osm

Trust me, there is no impact at all. What is he blindly trying to do is to make it look like CORS vuln without a clear understanding. There is no impact at all, cause by defautl, the URL itself is already public. What is he doing is just capture all the resonse into his browser. That's all =)) If any program rewards him for this, I think that program does not know about security =))

NA

I think that is just a Bad implementation, but i don't see any sensitive info. getting disclosed which I can capture in my log..

I got same cors vulnerability is this any impact and will i get any bounty ?

It's like an XSS it's similar to xss okay thank you for that sir.

Bounty kitni mili or kis level ka bug hai

I found same Vulnerability in /wp-json/wp/v2/users is it a valid bug. Please reply