Recently, the Checkmarx Security Research Team was looking for API security issues in high-profile web applications, including Meetup.com. In addition to some more-common API issues, we also found some serious cross-site scripting (XSS) and cross-site request forgery (CSRF) vulnerabilities, which may put users at risk. Full descriptions of Checkmarx’s findings can be found in this report.
The Checkmarx Security Research Team is committed to providing organizations with actionable insight to support their efforts of building more secure software. Producing a variety of research reports, the Checkmarx Team helps all technology users better understand the most prominent software and application issues impacting today’s digital world. We all have a responsibility to build software security into everything we deliver, and the Checkmarx Security Research Team is at the forefront of this mission.