Login
From:
Doyensec's Blog
(Uncensored)
subscribe
CSRF Protection Bypass in Play Framework
https://blog.doyensec.com/2020/08/20/playframework-csrf-bypass.html
links
backlinks
Roast topics
Find topics
Find it!
This blog post illustrates a vulnerability affecting the Play framework that we discovered during a client engagement. This issue allows a complete Cross-Site Request Forgery (CSRF) protection bypass under specific configurations.