Cross-Site Request Forgery (CSRF) in Add Users
Discription
# Description
Hello Team,
Create a member functionality is vulnerable for CSRF Attack ,
by exploiting CSRF vulnerability , attacker can add new Members
“`
“`
“`
POC video: https://drive.google.com/file/d/1dN2ug8qjwbz1CGbfuBldwam_IFE4BNyH/view?usp=sharing
“`
Fix:
I just want to suggest you to set a CSRF token .Read More
References
Back to Main