HexBrain

Yelp · Report #228295

User can be fooled to Bookmark any restaurant by clickjacking

Informativestatus
lowseverity
9 Nov 2017disclosed

How it was found

In this report https://hackerone.com/reports/214087 you people said the clickjacking issue is fixed but i have found another issue of clickjacking. Using clickjacking attacker can fooled an user to bookmark n numbers of restuarants. I am attaching a PoC video , watch the video.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original