Meetup vulnerabilities enabled group takeovers, payment redirections

Read the original article: Meetup vulnerabilities enabled group takeovers, payment redirections

Two high-risk vulnerabilities in Meetup, a popular online service that’s used to create groups that host local in-person events, allowed attackers to easily take over any Meetup group, access all group functions and assets, and redirect all Meetup payments/financial transactions to their PayPal account (some Meetup events are free, but some are not). What’s more, attackers could create a worm to take over all meetings on the site – including private ones – and do … More →

The post Meetup vulnerabilities enabled group takeovers, payment redirections appeared first on Help Net Security.

Read the original article: Meetup vulnerabilities enabled group takeovers, payment redirections