1 matches found
Shopify: Twitter Disconnect CSRF
Hello, Using this CSRF vulnerability one could disconnect twitter account from their profiles. Vulnerable request GET /auth/twitter/disconnect HTTP/1.1 Host: twitter-commerce.shopifyapps.com User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10.11; rv:43.0 Gecko/20100101 Firefox/43.0 Accept:...