Anatomy of a Subtle JSON Vulnerability
Posted by: youve been HAACKED,
on 21 Nov 2008 |
View original | Bookmarked: 0 time(s)
I recently learned about a very subtle potential security flaw when using JSON. While subtle, it was successfully demonstrated against GMail a while back. The post, JSON is not as safe as people think it is, covers it well, but I thought Id provide step-by-step coverage to help make it clear how the exploit works. The exploit combines Cross Site Request Forgery (CSRF) with a JSON Array hack allowing an evil site to grab sensitive user data from an unsuspecting user. The hack involves redefining the...