🎯 New Report #3321406: [Variation of #1554049 1-Click Chaining of Self-XSS, Cookie Tossing and AntiCSRF Token Prediction leads to auto approval in Access Temp Auth](https://hackerone.com/reports/3321406)
🔺Severity: High
👽 Reporter: matured kazama
⭐️ Reputation: 2383
🛠 State: resolved
💼 Team: Cloudflare Public Bug Bounty
💵 Bounty: null
🕐 Submitted: 2025-08-31
⏰ Disclosed: 2026-04-14 05:53:46
📝 Summary: A vulnerability was discovered in Cloudflare Access that could allow for unauthorized approvals within the Temporary Auth workflow. The issue was resolved after the researcher reported it to Cloudflare.
📂 Report JSON File: 3321406
@hackeronereports