OpenCart Password Change Cross-Site Request Forgery Vulnerability

A cross-site request forgery (CSRF) vulnerability has been identified in OpenCart version 3.0.3.7. This vulnerability allows attackers to change user passwords by sending crafted requests to the account/password endpoint. Exploitation involves tricking authenticated users into submitting hidden forms with new password values in the 'password' and 'confirm' parameters, effectively hijacking their accounts.

Impact

Exploitation of this vulnerability allows for unauthorized password changes, leading to account hijacking.

Reproduction

To reproduce this vulnerability, an authenticated user must be tricked into submitting a form that includes a new password and its confirmation. This can be done by sending a crafted request that exploits the lack of CSRF protection on the password change endpoint.