# [Vulnerability title]

[Vulnerability description]

## High-Level Overview
- FQDN of target:
- Attack Vector:
- Affected Functionality:
- CWE-ID:
- OWASP category:
- CVE (if available):
- CVSS 3.0:
  - Base Metrics:
    - AV:
    - AC:
    - PR:
    - UI:
    - S:
    - C:
    - I:
    - A:
    - Base Score:
  - Temporal Metrics:
    - E:
    - RL:
    - RC:
    - Temporal Score:
  - Environmental Metrics:
    - CR:
    - IR:
    - AR:
    - Modified Metrics (if any):
    - Environmental Score:
  - Vector String:
    CVSS:3.0/AV:X/AC:X/PR:X/UI:X/S:X/C:X/I:X/A:X/E:X/RL:X/RC:X/CR:X/IR:X/AR:X

## Testing Details

- Source IP address:
- `stay22-bug-bounty` header value used: [The email address corresponding with your submission]
- Tools used during testing:
- Testing timelines:
    - Start: [date, time & timezone]
    - End: [date, time & timezone]

[Any other testing details, such as accounts creates, files submitted, etc]

## Evidence

[Screenshots or videos]

[PoC exploit code]

[Request and response samples]