Web Hack List

Collected research

Exploiting email address parsing with AWS SES

AWS SES and many language email parsers disagree on which address a malformed string such as an angle-address followed by a second bare address actually targets. An app that validates or extracts the domain from one interpretation while SES delivers the verification email to a different address suffers email-verification and access-control bypass, allowing signup as an arbitrary domain and privilege escalation.

Record

Published by
nathandavison.com
Topic
Other

In the archive

Tags

This page is the archive's own catalogue record. The research is the work of nathandavison.com, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .