Using x-request-id to access ANY account via Header Injection!

(with Frans Rosén)

#bugbountytips #bugbounty #bugbounties