writeups.xyz / Stealing Chat session ID with CORS and execute CSRF attack

Submitter : c2a

Date: 2 February 2021

Bounty : undisclosed

Vulnerabilities :

• CSRF
• CORS Misconfiguration

Programs :

• Undisclosed

Authors :

• Sunil Yedla (@Sunilyedla2)

Link :
https://sunilyedla.medium.com/stealing-chat-session-id-with-cors-and-execute-csrf-attack-f9f7ea229db1