Lighthouse has a new layout. Prefer the old one? Return to the old layout, and switch back any time from the link at the top of each page.

Critical CSRF Vulnerability In 2.3.1

#1234

CSRF Vulnerability In Exponent 2.3.1

What Is CSRF - According To OWASP

CSRF is an attack which forces an end user to execute unwanted actions on a web application in which he/she is currently authenticated. With a little help of social engineering (like sending a link via email/chat), an attacker may trick the users of a web application into executing actions of the attacker's choosing. If the targeted end user is a normal user, a successful CSRF attack can compromise sensitive data. If the targeted end user is the administrator account, this type of attack can compromise the entire web application.

POC Video ( Private Mode) - http://youtu.be/ToSA48_37dk
Here is the CSRF Attack exploit code


Reported by Narendra Bhati · November 16th, 2014 @ 10:58 AM

State: new
Milestone: User issues
Assigned to: expNinja expNinja

Activity

  1. Narendra Bhati
    Narendra Bhati

    CSRF HTMl File is attached with this ticked

    November 16th, 2014 @ 10:59 AM

  2. Narendra Bhati
    Narendra Bhati
    • Assigned user set to expNinja

    So what your are going to do next ? about this issue !

    December 20th, 2014 @ 02:03 PM

Please Sign in or create a free account to add a new ticket.

With your very own profile, you can contribute to projects, track your activity, watch tickets, receive and update tickets through your email and much more.