HackerOne Bug Bounty Disclosure: http-request-smuggling-with-origin-rules-using-newlines-in-the-host_header-action-parameterbyalbertspedersen
Programme
HackerOne
- Cloudflare Public Bug Bounty
Submitted by
- albertspedersen
Report
HTTP request smuggling with Origin Rules using newlines in the host_header action parameter