WakaTime · Report #244778
Logout CSRF
Duplicatestatus
lowseverity
29 Aug 2017disclosed
How it was found
Cross-Site Request Forgery (CSRF) logout application
Because of that gap, he updates a man's attack in the middle and is exposed to the agent and all his personal data at risk This may cause the web to be compromised
I will send a test script and a video explaining everything about the problem
Resource https://wakatime.com Parameter login Method Get Detection Type Cross-Site Request Forgery (CSRF) logout application Test Browser Google Chrome & Internet Explorer
Thanks !!