AWS Cognito Account Takeover: Exploiting update-user-attributes to Hijack Admin Access

Objective Incognito Travel is rolling out a new authentication process for their flagship travel application. Before deploying to production, they have contracted Hack Smarter to rigorously test the n