Chaturbate · Report #396802

CSRF in "send them an email and browser notification" feature

Validstatus

lowseverity

$150bounty

6upvotes

27 Sept 2018disclosed

Summary

The hacker found that the "send an email and browser notification" feature was a GET call and did not check for csrf tokens, this was resolved.

The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original