Authenticated Cross-Site-Request-Forgery
该报告还没有中文解读。
原文摘录
摘自原文（2374 字符中的一小部分）
Summary: I have read the T&C to be eligible for bounty on this program. As per T&C authenticated CSRF requests are eligible for a bounty. I am not looking for the Bounty, However I want to give you an update on Authenticated CSRF that I have found. In the "Account Settings", a user can change his …
默认不展示报告全文。以上为简短摘录，完整复现过程请阅读原文。版权归研究员与 Semmle 所有。
时间线
- 报告提交
- 公开披露
阅读 HackerOne 原文 ↗作者 @drspitfire · 版权归作者与 Semmle 所有