🌍 17 — CORS Misconfig

Easy Medium Hard
Easy Medium Hard
0/3 solved

🔒 Hard — Exploit reflected origin CORS.

Use reflected origin on /api/user-data-hard.

The server reflects your Origin header.