writeups.xyz / CSRF In JSF 2.0: Predicting CSRF Tokens For Apache MyFaces

Submitter : c2a

Date: 19 February 2021

Bounty : undisclosed

Vulnerabilities :

• CSRF
• ViewState

Programs :

• Apache

Authors :

• Wolfgang Ettlinger

Link :
https://certitude.consulting/blog/en/csrf-myfaces-2/