Critical CSRF vulnerability found on Glassdoor company review platform | ZDNet
Bug bounty researcher “Tabahi” (ta8ahi) observed the situation, explained as a web-site-large cross-web-site request forgery (CSRF) bug deserving of a 9 – 10 severity score. The vulnerability impacts the Glassdoor world wide web domain.