pentester.land· Feb 13, 2023· by Imad Husanovic (@deadoverflow_)

Bypassing SameSite=lax cookie restrictions to preform CSRF resulting to a horizontal privilege escalation via poor email verification mechanism

Open Original Article ↗
Target Program: -
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.
#CSRF