Unikrn · Report #251918
Flash CSRF: Update Ad Frequency %: [cp-ng.pinion.gg]
Validstatus
mediumseverity
33upvotes
6 Sept 2017disclosed
Summary
For readers: http://www.geekboy.ninja/blog/exploiting-json-cross-site-request-forgery-csrf-using-flash/
How it was found
Description:
Attacker can update the user's Ad Frequency % using flash + 307 redirect trick by making post request to particular endpoint.
Step To Reproduce:
- Get logged at: https://cp-ng.pinion.gg
- Visit: http://geekboy.ninja/poc/freq.swf
- Ad Frequency should be updated.
Note: for test i used my account with id ████, as update request use userid in endpoint, it can be modified as per need.
{F205068}
Please let me know if any more info needed !
- Geekboy!