FanFootage · Report #15619
Cookie fixation
Validstatus
3upvotes
7 Aug 2014disclosed
How it was found
Hey there I found out that the cookies are being fixed before and after logout that results in session fixation and eventually account hijacking
This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original