I found the following behavior on a relatively popular website:
- They have a
GETroute for logging out (e.g.
- That allows me to write
!(/api/user/logout)in a comment or anything that accepts markdown and that will obviously log out the user.
The fix for this bug would be not using
GET (but using
DELETE or something similar) for the logout route.
What is the name of this type of exploit? Is it an important issue?