Google Buzz and Reader CSRF Vulnerability Comment [0]
Google recently launched a Twitter-like application called Google Buzz. We have established that the application is quite vulnerable to persistent CSRF attacks when data is pulled from external data feeds.
CSRF (Cross Site Request Forgery) vulnerability works by exploiting the trust that a site has for the user. Site tasks are usually linked to specific URLs allowing certain actions to be performed on request. If a user is logged on to the site and an attacker tricks the user’s browser into making…
Blog tags:
Social networks,
Vulnerabilities / Exploits
