zj1983 zz Cross-Site Request Forgery Vulnerability

A cross-site request forgery (CSRF) vulnerability has been identified in zj1983 zz versions prior to August 2024. This vulnerability allows remote attackers to manipulate an unknown functionality, potentially leading to unauthorized actions being performed on behalf of the user.

Impact

Exploitation of this vulnerability allows for cross-site request forgery, where an attacker can trick a user into performing actions they did not intend to.

Reproduction

To reproduce this vulnerability, deploy the proof of concept (PoC) on the server. Then, simulate an administrator by clicking on 'Authority Management', selecting 'Add Role', and then clicking 'Add Role' again. This action will generate a CSRF verification script that can be captured and used to exploit the vulnerability.