Ubiquiti Inc. · Report #329749
UniFi Video Server web interface Configuration Restore CSRF leading to full application compromise
Validstatus
highseverity
22upvotes
28 Apr 2019disclosed
Summary
In UniFi Video 3.10.0, due to the lack of CSRF protection, it is possible to abuse the Web API to make changes on the server configuration without the user consent, requiring the attacker to lure an authenticated user to access on attacker controlled page.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.