CVE-2014-2989
TAO 2.5.6 - Cross-Site Request Forgery via Users/add Endpoint
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2014-2989. PoCs published by High-Tech Bridge.
AI-analyzed exploit summary This is a CSRF exploit for TOA 2.5.6, allowing an attacker to create a new user with administrative privileges via a crafted HTML form. The exploit leverages missing CSRF token validation in the user addition endpoint.
Description
Cross-site request forgery (CSRF) vulnerability in Open Assessment Technologies TAO 2.5.6 allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts via a request to Users/add.
Exploits (1)
This is a CSRF exploit for TOA 2.5.6, allowing an attacker to create a new user with administrative privileges via a crafted HTML form. The exploit leverages missing CSRF token validation in the user addition endpoint.