GET based CSRF to make other users to follow/unfollw the attacker(me)/other users by sending a link https://www.bugheist.com/follow/<USER>/. Proof Of Concept: httpshttps://www.bugheist.com/follow/Anon1337/ 270

Domain: http://www.bugheist.com
Tweet Share
Bugheist

Reported on www.bugheist.com

Total # of issues reported = 183

febinrev

Reported by febinrev

Total Points of febinrev = 320

browser

Browser Version: 68.0

Operating System: Linux

OS Version:

Bug Type: Security
Status: open
Added on: Aug. 28, 2020, 3:50 p.m.

Description

Screenshots:

screenshot

OCR Results:

OCR not installed

Comments:

No comment added yet. Be the first to comment!