HexBrain

WakaTime · Report #244778

Logout CSRF

Duplicatestatus
lowseverity
29 Aug 2017disclosed

How it was found

Cross-Site Request Forgery (CSRF) logout application

Because of that gap, he updates a man's attack in the middle and is exposed to the agent and all his personal data at risk This may cause the web to be compromised

I will send a test script and a video explaining everything about the problem

Resource https://wakatime.com Parameter login Method Get Detection Type Cross-Site Request Forgery (CSRF) logout application Test Browser Google Chrome & Internet Explorer

Thanks !!

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original