POJIA破甲
地图 / CSRF on api.my.games due to improper validation of token allows an attacker to delete other users notifications

CSRF on api.my.games due to improper validation of token allows an attacker to delete other users notifications

跨站请求伪造 / 跨站请求伪造 / #1044933

厂商
Mail.ru
严重程度
未评级
赏金
$100
弱点
跨站请求伪造
研究员
—
披露日期
—
资产
—
CVE
—

该报告还没有中文解读。

时间线

暂无时间线。

阅读 HackerOne 原文 ↗作者 见原文 · 版权归作者与 Mail.ru 所有

同类报告

[CSRF] TikTok Careers Portal Account TakeoverTikTok · 2020-12-15CSRF on connecting Paypal as Payment ProviderShopify · 2020-04-10Account Takeover using Linked Accounts due to lack of CSRF protectionRockstar Games · 2019-02-20Periscope android app deeplink leads to CSRF in follow actionX / xAI · 2020-02-21 · $1,540Take over of accounts created using Google or FacebookKhan Academy · 2019-05-17Improper CSRF token validation allows attackers to access victim's accounts linked to HackeroneHackerOne · 2023-06-19