Zoom Security Exploit: Cracking private meeting passwords
as an fyi, csrf protection is not related to bot protection; the csrf protection failure means an attacker can execute this code in another user’s browser (and get no meaningful  result)