Lucene search
+L

4 matches found

Hacker One
Hacker One
added 2022/02/17 11:22 a.m.49 views

Stripe: CSRF token validation system is disabled on Stripe Dashboard

@dsharad discovered that due to a code change deployed on 2/14/2022, Cross Site Request Forgery CSRF protection was disabled in the Stripe Dashboard. This could have allowed an attacker to trick a victim user to visit a malicious website and cause limited changes to the victim’s Stripe account su...

7.2AI score
SaveExploits0
Rows per page
Query Builder