| शीर्षक | Archivy Project Archivy 1.7.7 Cross-Site Request Forgery |
|---|
| विवरण | Flask-WTF CSRF protection is explicitly exempted for the entire API blueprint (csrf.exempt(api_bp)) and the bookmark-saving endpoint (@csrf.exempt on /save_from_bookmarklet). Since the application does not configure SESSION_COOKIE_SAMESITE, session cookies carry no SameSite attribute. In same-site deployment scenarios (same host different port, same LAN — the typical model for self-hosted tools), an attacker-controlled page can auto-submit forms to create arbitrary bookmarks with attacker-controlled HTML content under the authenticated user's identity, without any CSRF token. All API write endpoints (create/update/delete bookmarks, notes, folders) are equally unprotected. Verified on a live instance: POST without CSRF token successfully created a bookmark (302 → /dataobj/1) and a note via API (200, note_id=2). |
|---|
| स्रोत | ⚠️ https://github.com/BlkSword/POC/blob/main/archivy-csrf-vulnerability-report.md |
|---|
| उपयोगकर्ता | XiaoHei (UID 92738) |
|---|
| सबमिशन | 23/07/2026 02:34 PM (2 महीनों पहले) |
|---|
| संयम | 23/09/2026 05:23 PM (2 months later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 189080 [archivy क्रॉस साइट रिक्वेस्ट फॉर्जरी] |
|---|
| अंक | 0 |
|---|