Udemy · Report #137008
Csrf on creating course
Informativestatus
3upvotes
10 Jan 2017disclosed
Summary
The investigator thought that since there was a CSRF token sent for a request that does not enforce CSRF he was bypassing it.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.