Loading HuntDB...

CSRF in Delete Pet Function

Medium
M
Mars
Submitted None

Team Summary

Official summary from Mars

A Cross-Site Request Forgery (CSRF) vulnerability is identified in the Delete Pet functionality on the ████████ platform. The vulnerability is discovered in the pet deletion endpoint which can be exploited by manipulating the pet ID parameter. When exploited, an attacker can force authenticated users to delete their pets without their knowledge or consent by simply having them visit a maliciously crafted webpage containing the CSRF payload.

Reported by mo_salah12

Report Details

Additional information and metadata

State

Closed

Substate

Resolved

Submitted

Weakness

Cross-Site Request Forgery (CSRF)