Loading HuntDB...

Subdomain takeover of mydailydev.starbucks.com

High
S
Starbucks
Submitted None

Team Summary

Official summary from Starbucks

A subdomain of `starbucks.com` had a CNAME record pointing to an Azure Traffic Manager profile that @0xpatrik was able to claim.

Reported by 0xpatrik

Report Details

Additional information and metadata

State

Closed

Substate

Resolved

Submitted

Weakness

Externally Controlled Reference to a Resource in Another Sphere