Zaption · Report #76733

Using GET method for account login with CSRF token leaking to external sites Via Referer.

Validstatus

4upvotes

2 May 2016disclosed

Summary

CSRF token leaking to external sites via Referer

At the time of login, the values are present in URL along with the CSRF token. Also this URL is leaking to external sites in HTTP REFRERER.

Here are some of those sites: dxzc9stvaxhhy.cloudfront.net bam.nr-data.net ssl.google-analytics.com usage.trackjs.com api.mixpanel.com

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original