CSRF in Delete Pet Function
Medium
M
Mars
Submitted None
Team Summary
Official summary from Mars
A Cross-Site Request Forgery (CSRF) vulnerability is identified in the Delete Pet functionality on the ████████ platform. The vulnerability is discovered in the pet deletion endpoint which can be exploited by manipulating the pet ID parameter. When exploited, an attacker can force authenticated users to delete their pets without their knowledge or consent by simply having them visit a maliciously crafted webpage containing the CSRF payload.
Actions:
Reported by
mo_salah12
Report Details
Additional information and metadata
State
Closed
Substate
Resolved
Submitted
Weakness
Cross-Site Request Forgery (CSRF)