Do not dismiss the small vulnerabilities!
Never dismiss a small vulnerability because its impact on its own is negligible. Seemingly innocent vulnerabilities can be combined into something much more dangerous or, …
CSRF
CAPTCHA does not prevent cross-site request forgery (CSRF)
In our dialogues with customers, we often come across cross-site request forgery (CSRF) findings marked as False Positives due to having CAPTCHA implemented. There is a …
OWASP TOP 10 2013: Cross-site Request Forgery – CSRF
The eighth vulnerability on the list is Cross-site Request Forgery (CSRF), a vulnerability that allows an attacker to make requests on behalf of a user. CSRF can lead to a wide range of state-changing requests such as changing credentials, transferring funds, and modifying settings being executed on the user’s behalf.
Vulnerabilities
The internet is awesome, but it can also be a pretty dangerous place. This is why we at Detectify are always on the lookout for vulnerabilities! If you’d like to learn more about different vulnerability types and staying safe online, check out the articles on this list.