CVE-2023-34927
MEDIUMCasdoor < 1.331.0 - Cross-Site Request Forgery via Password Reset Endpoint
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2023-34927. PoCs published by Van Lam Nguyen.
AI-analyzed exploit summary This exploit demonstrates a CSRF vulnerability in Casdoor v2.95.0, allowing an attacker to change the victim's password by tricking them into submitting a crafted form. The PoC bypasses the old password authentication step via a hidden form submission.
Description
Casdoor v1.331.0 and below was discovered to contain a Cross-Site Request Forgery (CSRF) in the endpoint /api/set-password. This vulnerability allows attackers to arbitrarily change the victim user's password via supplying a crafted URL.
Exploits (3)
This exploit demonstrates a CSRF vulnerability in Casdoor v2.95.0, allowing an attacker to change the victim's password by tricking them into submitting a crafted form. The PoC bypasses the old password authentication step via a hidden form submission.
This exploit demonstrates a CSRF vulnerability in Casdoor v2.55.0, allowing an attacker to change the victim's password by tricking them into submitting a crafted form. The PoC uses a hidden HTML form with JavaScript to automatically submit the request.
This exploit demonstrates a CSRF vulnerability in Casdoor's /api/set-password endpoint, allowing an attacker to change a victim's password without their old password. The PoC uses a crafted HTML form with hidden inputs to submit a password change request.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N