POJIA破甲
地图 / CSRF on cuvva.insure allows to attacker to send multiple SMS to download the app without visiting the cuvva

CSRF on cuvva.insure allows to attacker to send multiple SMS to download the app without visiting the cuvva

跨站请求伪造 / 跨站请求伪造 / #250430

厂商
Cuvva
严重程度
未评级
赏金
—
弱点
跨站请求伪造
研究员
—
披露日期
—
资产
—
CVE
—

该报告还没有中文解读。

时间线

暂无时间线。

阅读 HackerOne 原文 ↗作者 见原文 · 版权归作者与 Cuvva 所有

同类报告

[CSRF] TikTok Careers Portal Account TakeoverTikTok · 2020-12-15CSRF on connecting Paypal as Payment ProviderShopify · 2020-04-10Account Takeover using Linked Accounts due to lack of CSRF protectionRockstar Games · 2019-02-20Periscope android app deeplink leads to CSRF in follow actionX / xAI · 2020-02-21 · $1,540Take over of accounts created using Google or FacebookKhan Academy · 2019-05-17Improper CSRF token validation allows attackers to access victim's accounts linked to HackeroneHackerOne · 2023-06-19