Flickr · Report #1440290
Critical broken cookie signing on dagobah.flickr.com
Validstatus
mediumseverity
$479bounty
30upvotes
24 May 2022disclosed
Summary
In this report it was discovered that we were signing one of our cookies with a weak, static secret key. To fix this, we replaced the aforementioned weak, static key with a more robust and secure system for signing that cookie.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.