🎯 New Report #3423950: [Variation of #3321406 YetAnother 1-Click Chaining of Self-XSS, Cookie Tossing and AntiCSRF Token Prediction leads to auto approval in AccessTempAuth](https://hackerone.com/reports/3423950)
🔺Severity: High
👽 Reporter: matured kazama
⭐️ Reputation: 2383
🛠 State: resolved
💼 Team: Cloudflare Public Bug Bounty
💵 Bounty: null
🕐 Submitted: 2025-11-12
⏰ Disclosed: 2026-04-14 05:54:53
📝 Summary: A vulnerability in Cloudflare Access involving the Browser Isolation email field was discovered, which could allow for unauthorized approvals within the Temporary Auth workflow. The issue has been fully remediated.
📂 Report JSON File: 3423950
@hackeronereports