Critical CSRF flaw in Glassdoor nets security researcher $3,000 bug bounty December 20, 2020 $3000 2020 best bounty breach bugbounty Critical CSRF data breach Glassdoor Glassdorr report security +