Subrion CMS 4.2.1 Cross Site Request Forgery

Subrion CMS version 4.2.1 suffers from a cross site request forgery vulnerability.

MD5 | d410d92fc991aa1e751d5761cd42bb78

# Title: Subrion CMS 4.2.1 Cross-Site Request Forgery vulnerability (CSRF)
# Date: 01-12-2019
# Author: Christian Bortone
# Contact: [email protected]
# Vendor Homepage:
# Vulnerable Product: Subrion CMS 4.2.1
# CVE : CVE-2019-20390

1. Description:

A Cross-Site Request Forgery (CSRF) vulnerability is discovered in Subrion CMS 4.2.1 which allows a remote attacker to remove files on the server without victim's knowledge by enticing authenticated user to visit attacker page/URL. The application failed to validate CSRF token on the GET request. An attacker can craft an URL (removing the token) and send to the victim.

2. Proof of Concept

<!-- Cancel file test.txt (l1_ci90ZXN0LnR4dA) from directory rm. -->


<img src="http://localhost/subrion/panel/uploads/read.json?cmd=rm&targets[]=l1_ci90ZXN0LnR4dA" />


Related Posts