Web Application Subdomain Takeover Exploit: Turning a Dangling CNAME Into Parent-Domain Cookie Control
A Synack Red Team researcher discovered and exploited a subdomain takeover by leveraging a non-obvious feature of a third-party portal, which allowed arbitrary JavaScript source-code inclusion.


