Discord Link expired - Possible vanity address could be used to link a malicious Discord server.

Disclosed by
Nath1014's avatar
Nath1014
  • Engagement Zilliqa
  • Disclosed date about 5 years ago
  • Points 10
  • Priority P3 Bugcrowd's VRT priority rating
  • Status Resolved This vulnerability has been accepted and fixed
Summary by Nath1014

Expired discord link takeover using vanity URL Discord premium perk. Vanity url was used to point the expired Discord link to a different Discord server. A malicious user could use this to send users to a discord server with malicious intent.

Activity
  1. JH_Zilliqa’s avatar
    JH_Zilliqa Customer published the disclosure report

    ()

  2. Nath1014’s avatar
    Nath1014 requested disclosure

    ()

  3. cliff_bugcrowd’s avatarbugcrowd logo
    cliff_bugcrowd changed the state to Resolved

    ()

  4. Nath1014’s avatar
    Nath1014 sent a message

    ()

  5. JH_Zilliqa’s avatar
    JH_Zilliqa Customer sent a message

    ()

  6. Nath1014’s avatar
    Nath1014 sent a message

    ()

  7. JH_Zilliqa’s avatar
    JH_Zilliqa Customer sent a message

    ()

  8. JH_Zilliqa’s avatar
    JH_Zilliqa Customer rewarded Nath1014

    ()

  9. JH_Zilliqa’s avatar
    JH_Zilliqa Customer changed the state to Unresolved

    ()

  10. JH_Zilliqa’s avatar
    JH_Zilliqa Customer rewarded Nath1014 10 points

    ()

  11. cliff_bugcrowd’s avatarbugcrowd logo
    cliff_bugcrowd sent a message

    ()

  12. cliff_bugcrowd’s avatarbugcrowd logo
    cliff_bugcrowd changed the state to Triaged

    ()

  13. cliff_bugcrowd’s avatarbugcrowd logo
    cliff_bugcrowd changed the severity to P3

    ()

  14. Nath1014’s avatar
    Nath1014 sent a message

    ()

  15. Nath1014’s avatar
    Nath1014 sent a message

    ()

  16. Nath1014’s avatar
    Nath1014 sent a message

    ()

  17. JH_Zilliqa’s avatar
    JH_Zilliqa Customer sent a message

    ()

  18. Nath1014’s avatar
    Nath1014 sent a message

    ()

  19. Nath1014’s avatar
    Nath1014 sent a message

    ()

  20. Nath1014’s avatar
    Nath1014 resolved a blocker for Zilliqa by providing information on reproduction

    ()

  21. Nath1014’s avatar
    Nath1014 sent a message

    ()

  22. cliff_bugcrowd’s avatarbugcrowd logo
    cliff_bugcrowd created a blocker on the researcher to provide information on reproduction

    ()

  23. cliff_bugcrowd’s avatarbugcrowd logo
    cliff_bugcrowd sent a message

    ()

  24. Nath1014’s avatar
    Nath1014 created the submission

    ()