CORS

Overlooked CORS Misconfiguration led to CSRF on Core Asset of Swisscom