CVE-2020-24033

This repository contains a functional CSRF exploit for CVE-2020-24033, targeting FS.com S3900 24T4S devices. The PoC demonstrates how an attacker can add a new admin user via a crafted HTML form due to missing CSRF protections.

This PoC demonstrates a CSRF vulnerability in FS.com S3900 24T4S (1.7.1 and earlier) that allows an attacker to add a new admin user without authentication. The exploit leverages a lack of CSRF tokens in the user account creation form.