CORS Misconfiguration Vulnerabilities

This great article by intigriti shows how to exploit common CORS misconfigurations in the backend to access user information. Great article if you are into bug bounties!