writeups.xyz / Ribose — IDOR with Simple CSRF Bypass — Unrestricted Changes and Deletion to other Photo Profile

Submitter : c2a

Date: 18 April 2018

Bounty : undisclosed

Vulnerabilities :

• IDOR

Programs :

• Ribose

Authors :

• YoKo Kho (@YokoAcc)

Link :
https://medium.com/@YoKoKho/ribose-idor-with-simple-csrf-bypass-unrestricted-changes-and-deletion-to-other-photo-profile-e4393305274e