Back to directory
WRITEUP #5257

[TOKOPEDIA] Site-wide CSRF through GraphQL request

CSRF
by@rafiem777(Rafie Muhammad)
Program
Tokopedia
Published
Jul 15, 2019
Added to HackDex
Sep 15, 2022
Read Full Writeuphttps://yeraisci.com/tokopedia-site-wide-csrf-through-graphql-request
▸ RELATED WRITEUPS
Basic HTTP Authentication Risk: Uncovering pyspider Vulnerabilities
XSSReflected XSS
CSRF Bypass Using Domain Confusion Leads To ATO
CSRFAccount takeover
Vulnerabilities in Homepage Dashboard
RCESSRF
AI Under Siege: Discovering and Exploiting Vulnerabilities
AI / LLMAI
How Almost Sacrificing a University Group Project led to a Microsoft Bug Bounty
XSSCSRF

Built with ❤️ by Shubham Rawat