From POST-Based XSS to Full Account Takeover
Medium2026-10-28
Web
Not rated
BUG BOUNTY WRITEUPS
CSRF writeups
Cross-site request forgery: making a logged-in user's browser send a request they never meant to. Still around wherever SameSite cookies and tokens are missing.
42 reports and writeups from 2024 to 2026. 27 carry a severity from the disclosing platform, 5 of them rated High or Critical. Last updated 2026-10-30.
Latest CSRF reports
Search and filter all writeupsCSRF and XSS: How a Valid Login Can Be Misused
Medium2026-10-27
Web
Not rated
CSRF in zone‑include.php allows unauthorized banner and campaign linking
HackerOneRevive Adserver2026-06-25
Web
Medium
We Need to Talk About CSRF Again
Researcher blog2026-05-08
Web
Not rated
CSRF allowing unauthorized modification of user Notes on ███████
HackerOneTucows (VDP)2025-10-10
Web
Low
CSRF vulnerability allows disabling Gmail contacts link for user referrals
HackerOneInsightly2025-09-19
Web
Medium
Pivilege escalation of any new user to Keymaster caused by CSRF
HackerOneWordPress2025-09-13
Web
Medium
CSRF at Network feature
HackerOneLichess2025-07-08
Web
Medium
CSRF to Reflected XSS at echo.urbandictionary.biz via spoofing content type
HackerOneUrban Dictionary2025-03-11
Web
Medium
There is a POST based CSRF issue over IBM endpoint leading to modification of contact information.
HackerOneIBM2025-02-04
Web, API
Medium
CSRF leads to Account takeover
HackerOneU.S. Dept Of Defense2024-12-18
Web
High
CSRF Attack leads to delete album at ████████
HackerOneU.S. Dept Of Defense2024-12-18
Web
Medium
CSRF Attack on changing security questions leads to full Account TakeOver
HackerOneU.S. Dept Of Defense2024-12-18
Web
High
CSRF Attack leads to delete album at
HackerOneU.S. Dept Of Defense2024-12-18
Web
Medium
CSRF leads to Account takeover
HackerOneU.S. Dept Of Defense2024-12-18
Web
High
csrftoken not unique to session or specific user and csrfmiddlewaretoken can be altered
HackerOneMozilla2024-11-20$500 bounty
Web
Low
CSRF in Delete Pet Function
HackerOneMars2024-11-19
Web
Medium
CSRF in ticket function
HackerOneTikTok2024-11-05
Web
Medium
Client-Side Path Traversal on LINE Developers Console
HackerOneLY Corporation2024-09-26
Web
Medium
Basic HTTP Authentication Risk: Uncovering pyspider Vulnerabilities
Researcher blogpyspider2024-09-02
Web, Source Code
Not rated
CSRF Bypass Using Domain Confusion Leads To ATO
InfoSec Write-ups2024-08-28$4,000 bounty
Web
Not rated
CSRF and XSS on www.acronis.com
HackerOneAcronis2024-08-26
Web
Low
Vulnerabilities in Homepage Dashboard
Researcher blogHomepage2024-08-22
Web
Not rated
AI Under Siege: Discovering and Exploiting Vulnerabilities
Researcher blog2024-08-05
Web, AI
Not rated
How Almost Sacrificing a University Group Project led to a Microsoft Bug Bounty
MediumMicrosoft (GroupMe)2024-07-23
Web
Not rated
SSD Advisory – XenForo RCE Via CSRF
Researcher blogXenForo2024-07-16
Web, Source Code
Not rated
Exploiting Client-Side Path Traversal to Perform Cross-Site Request Forgery - Introducing CSPT2CSRF
Researcher blog2024-07-02
Web
Not rated
Self XSS + Login CSRF + OAuth = Account Takeover
Medium2024-07-02
Web
Not rated
CSRF resulting in adding pet at ███████
HackerOneMars2024-06-25
Web
Low
monitoring.prow-canary.k8s.io is vulnerable to CVE-2022-21703 (Grafana 0-day)
HackerOneKubernetes2024-06-25$100 bounty
Web, Cloud
Low
Comment/channel unsubscribe GET CSRF
HackerOneExpressionEngine2024-05-28
Web
Low
Arbitrary comment content change with GET CSRF.
HackerOneExpressionEngine2024-05-28
Web
Low
Arbitrary forum topic close with GET CSRF.
HackerOneExpressionEngine2024-05-28
Web
Low
CVE-2024-2448: Authenticated Command Injection In Progress Kemp LoadMaster
Researcher blogProgress (Kemp LoadMaster)2024-04-16
Web, Source Code
Not rated
JSON CSRF in Microsoft Bing Maps Collections
InfoSec Write-upsMicrosoft (Bing)2024-02-09
Web
Not rated
CSRF to delete a pet on ██████
HackerOneMars2024-02-05
Web
Low
LedgerSMB – CVE-2024-23831: Privilege escalation through CSRF attack on “setup.pl”
Researcher blogLedgerSMB2024-02-02
Web
Not rated
No CSRF protection when adding an item to cart
HackerOneMars2024-01-30
Web
Low
Argo CD CSRF leads to Kubernetes cluster compromise
HackerOneInternet Bug Bounty2024-01-29$4,660 bounty
Web, Cloud
High
Revocation API Token by Bypassing The XSRF Token
HackerOneEnjin2024-01-19
Web, API
Critical
CVE-2023-49920: Apache Airflow: Missing CSRF protection on DAG/trigger
HackerOneInternet Bug Bounty2024-01-09
Web
Medium
The power of Client-Side Path Traversal: How I found and escalated 2 bugs through “../”
Medium2024-01-01
Web
Not rated
Every entry links to the original report or article. Secure Hyperloop doesn't copy the content. Severity comes from the disclosing platform (HackerOne). Writeups without a platform rating show "Not rated". The index has 2,810 items in total.