Ubiquiti Inc. · Report #50703
CSRF in login form would led to account takeover
Validstatus
10upvotes
20 Jun 2016disclosed
Summary
This researcher was able to demonstrate an CSRF attack against a now decommissioned we service.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.