POJIA破甲
地图 / Udemy s3 storage can be used by an attacker personal website because of missing CSRF Token

Udemy s3 storage can be used by an attacker personal website because of missing CSRF Token

跨站请求伪造 / 跨站请求伪造 / #172707

厂商
Udemy
严重程度
未评级
赏金
—
弱点
跨站请求伪造
研究员
@csanuragjain
披露日期
2017-01-05
资产
—
CVE
—

该报告还没有中文解读。

时间线

  • 报告提交
  • 公开披露
阅读 HackerOne 原文 ↗作者 @csanuragjain · 版权归作者与 Udemy 所有

同类报告

[CSRF] TikTok Careers Portal Account TakeoverTikTok · 2020-12-15CSRF on connecting Paypal as Payment ProviderShopify · 2020-04-10Account Takeover using Linked Accounts due to lack of CSRF protectionRockstar Games · 2019-02-20Periscope android app deeplink leads to CSRF in follow actionX / xAI · 2020-02-21 · $1,540Take over of accounts created using Google or FacebookKhan Academy · 2019-05-17Improper CSRF token validation allows attackers to access victim's accounts linked to HackeroneHackerOne · 2023-06-19