Skip to main content
The app is most likely vulnerable to CSRF attacks through the reuse of the same action for both GET and POST
Likelihood: MEDIUM
Confidence: LOW
CWE:
- CWE-352: Cross-Site Request Forgery (CSRF)
OWASP:
- A01:2021 - Broken Access Control