Back to directory

WRITEUP #2596

CSRF leads to account takeover in Yahoo!

CSRFAccount takeover

by@Retr02332(Retr02332)

Bounty

3,000

Program

Yahoo! / Verizon Media

Published

Jun 16, 2022

Added to HackDex

Sep 15, 2022

Read Full Writeuphttps://webs3c.com/t/csrf-leads-to-account-takeover-in-yahoo/93

▸ RELATED WRITEUPS

CSRF Bypass Using Domain Confusion Leads To ATO

CSRFAccount takeover

Interesting Story of an Account Takeover Vulnerability

Auth BypassAccount takeover

Self-XSS to ATO via Site Features

Basic HTTP Authentication Risk: Uncovering pyspider Vulnerabilities

XSSReflected XSS

Instagram and Meta 2FA Bypass by Unprotected Backup Code Retrieval in Accounts Center

Auth Bypass2FA / MFA bypass

Built with ❤️ by Shubham Rawat