Other nomination
Exploiting email address parsing with AWS SES
AWS SES and many language email parsers disagree on which address a malformed string such as an angle-address followed by a second bare address actually targets. An app that validates or extracts the domain from one interpretation while SES delivers the verification email to a different address suffers email-verification and access-control bypass, allowing signup as an arbitrary domain and privilege escalation.
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of its author, first published at the original source. Preserved copies are kept so the citation survives its host.