ok.ru · Report #448928
Отсутствие CSRF ключа на функции Закрытый Профиль.
Validstatus
criticalseverity
16upvotes
15 May 2020disclosed
Summary
"Friends only" account mode could be toggled on and off with a CSRF attack.
Настройка Закрытый профиль могла быть включена или выключена через CSRF.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.