PT-2018-17696

Name of the Vulnerable Software and Affected Versions Grammarly extension versions prior to 2018-02-02 for Chrome Description The issue allows remote attackers to discover authentication tokens. This is achieved by sending an 'action: "user"' request to the "iframe.gr -ifr" endpoint, because the...