17 years old guy finds a critical CSRF vulnerability on Twitter

17 years old Irfan Cikoglu whose nickname is "diorray" has found a CSRF vulnerability which allows attacker to make applications authorized. The vulnerability has been fixed in 2 day after reporting. It is so bad that Twitter has no bug bounty program. The young boy could make much money with spam tweets.

http://www.irfancikoglu.com/?sayfa=icerik&id=45