Go Back
CSRF worm released on Twitter
27 September 2010
“Cross-site request forgery is a method of gaining access to a web application by exploiting the user’s logged-in session. This worm appears to be mischievous rather than malicious - such as the worm last week that exploited a mouseover flaw – but it exposes a serious issue in the Twitter security model which needs to be fixed to avoid users suffering weekly or daily incidents of this kind.”
Category: Blog Posts