Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2019/11/03 9:48 a.m.17 views

Lark Technologies: [CSRF] No Csrf protection against sending invitation to join the team.

A Cross-Site Request Forgery CSRF vulnerability was found on a "Create Invite" endpoint, which could result in any users being added to a team by tricking another user to run this Proof of Concept. We thank @imrannisar for reporting this to our team...

2.9AI score
SaveExploits0
Rows per page
Query Builder