Is uservoice subdomain takeover possible?

[1nc0gn170]

I have found a program where website its response is 404 and Its Cname is pointing to uservoice.com.
I didn't find any registration portal for that site.

;; ANSWER SECTION:
mywebsite.com. 299 IN	CNAME	mywesbsite.uservoice.com.

Anyone Help me please

[HammyHavoc]

Wondering this myself as a former UserVoice user. CC @austintaylor @attack7 @hoffoo

[hoffoo]

@n41n4 @HammyHavoc

It is not possible - subdomain cnames are unique and cannot be reused

[HammyHavoc]

@n41n4 @HammyHavoc

It is not possible - subdomain cnames are unique and cannot be reused

Thanks for that! Thought as much. I had somebody reach out asking for a bug bounty reward in exchange for this "information".

[pdelteil]

More info https://hackerone.com/reports/269109

[sn1p3rt3s7]

@pdelteil So is it vulnerable?

[sn1p3rt3s7]

But it can cause Broken link hijacking if the name.uservoice.com is directly embedded in a site.
Seen this type of issue, but closed as Informative on H1, X program as it is considered out of scope.
https://docs.hackerone.com/en/articles/8494488-core-ineligible-findings
But still some programs on H1 accept BLH so basically it depends