CSRF vulnerability in GMail service :: Something smarter than us is going to emerge


node:	CSRF vulnerability in GMail service
template:	4
parent:	Google
owner:	sine
viewed by:
created:	19.03.2009 - 18:43:27
updated:	19.03.2009 - 18:44:05

cwbe coordinatez:
101
63540
2111157
5047497
2000633
4591103

ABSOLUT
KYBERIA

permissions
you:	r,
system:	public
net:	yes

http://seclists.org/fulldisclosure/2009/Mar/0029.html

00000101000635400211115705047497020006330459110304600883

celkom huste...BTW ked uz je rec o Google a security, tak tu je tiez popis ineho incidentu, co mali
http://searchengineland.com/google-docs-bug-shares-your-documents-without-permission-16837

there is no spoon

00000101000635400211115705047497020006330459110304591229

nechápem ako tam mohli mať takúto lamerskú chybu

0000010100063540021111570504749702000633045911030459122904591812

co ja viem tak to nie je az taka news

000001010006354002111157050474970200063304591103045912290459181204592891

coze? :)

netvrdim, je to novinka (ved na to mame datumy), jedine som to v tomto fore nevidel. ide o kriticku vec, ktora sa da relativne jednoduchym sposobom (pre ludi, ktori sa v danej oblasti aspon trochu orientuju) zneuzit. samozrejme sa google vyznamenal aj horsimi chybami, to ano, ale za tu dobu uz bezpecnost rapidne pokrocila a podobne veci by mali by uz davno fixnute. tym viac, ze ide o google.

00000101000635400211115705047497020006330459110304591229045918120459289104593748

nezda sa mi ze by to spravilo dieru do sveta.