Stripo Inc · Report #915541
Cross-Site WebSocket Hijacking Lead to Steal XSRF-TOKEN
Validstatus
highseverity
13upvotes
27 Jul 2020disclosed
Summary
The WebSocket handshake request was vulnerable to CSRF, WebSocket content was contain many sensitive data for the user
It was like the PortSwigger Lab .
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.