Lighthouse has a new layout. Prefer the old one? Return to the old layout, and switch back any time from the link at the top of each page.

Critical CSRF Vulnerability

#1232

I was reported csrf vulnerability here
#1179 Possible 0 Days Security Issue???

But you team not able to understand the vulnerability and his impact so i am reporting you again for this issue

Here you will get the all details - https://www.owasp.org/index.php/Cross-Site_Request_Forgery_(CSRF)

By using CSRF an attacker can remotely trick an logged administrator to change his site title bar name , create a new page , create a post with xss payload
kindly see the poc video

Reported by Narendra Bhati · November 6th, 2014 @ 07:09 PM

State: new
Milestone: 2.3.7
Assigned to: expNinja expNinja

Activity

  1. Narendra Bhati
    Narendra Bhati
    • Assigned user set to expNinja

    i am talking about csrf not xss !

    November 14th, 2014 @ 03:17 PM

  2. Narendra Bhati
    Narendra Bhati

    i will find the same issue "CSRF" in your new cms version which is 2.3.1 and report it to you with new ticket

    November 14th, 2014 @ 03:18 PM

Please Sign in or create a free account to add a new ticket.

With your very own profile, you can contribute to projects, track your activity, watch tickets, receive and update tickets through your email and much more.