| शीर्षक | Konica Minolta Web Connection bizhub C368 Cross-Site Request Forgery |
|---|
| विवरण | A unprotected page for authentication can leads to trigger cross site scripting.
Attack vector(s)
1. Once the attacker finds the unprotected printer page, navigate to "Box" option found on home page.
2. Click on "User Box List" and register a box.
3. It will show under "User Box list", there click on delete, it will ask for the confirmation, click "ok" and intercept the request then drop it after making csrf POC.
4. Now open the CSRF poc file and trigger the request, it can be seen that the Box has been deleted. |
|---|
| स्रोत | ⚠️ https://drive.google.com/file/d/1pECiiSWdB_ERzzGrc--WY63IzZxR6i6L/view |
|---|
| उपयोगकर्ता | Upasana (UID 12274) |
|---|
| सबमिशन | 02/02/2025 10:36 AM (1 वर्ष पहले) |
|---|
| संयम | 09/06/2025 07:47 AM (4 months later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 311656 [Konica Minolta bizhub तक 20250202 क्रॉस साइट रिक्वेस्ट फॉर्जरी] |
|---|
| अंक | 20 |
|---|