Krisp · Report #1267476
Authentication CSRF resulting in unauthorized account access on Krisp app
Validstatus
highseverity
35upvotes
20 Jun 2022disclosed
Summary
@yassineaboukir has identified and reported a CSRF issue on our desktop applications authentication flow affecting account dashboard that could result in an unauthorized access of a user account. We would like to thank Yassine Aboukir for reporting it responsibly to our bug bounty program !
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.