Inflection · Report #241194
Session ID is accessible via XSS
Validstatus
mediumseverity
12upvotes
30 Sept 2018disclosed
Summary
Researcher found a vulnerability in the authentication flow that, when chained with an XSS vulnerability could lead to session take over.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.