| शीर्षक | CSRF in NXFILTER - Delete user |
|---|
| विवरण | A CSRF vulnerability in Nxfilter in version x.x.x.x that allows deleting a user without any kind of verification or anti-csrf token. This flaw is extremely dangerous because when deleting the user, he loses all the rules established in the network.
Vulnerability: https://NX_FILTER_IP/user,user.jsp?actionFlag=delete&page=1&kw=teste&id=1623
When the attacker sends this link to the admin and he clicks, the user whose ID is 1623 will be deleted.
This can delete users from nxfilter and then they'll lose their rules in the network.
Nxfilter in version x.x.x.x |
|---|
| स्रोत | ⚠️ https://nxfilter.org/p4/ |
|---|
| उपयोगकर्ता | 0xgordo (UID 50709) |
|---|
| सबमिशन | 13/07/2023 04:13 PM (3 साल पहले) |
|---|
| संयम | 22/07/2023 08:23 AM (9 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 235192 [NxFilter 4.3.2.5 user.jsp क्रॉस साइट रिक्वेस्ट फॉर्जरी] |
|---|
| अंक | 20 |
|---|