CS-Cart Cross-Site Request Forgery Vulnerability Allowing Unauthorized Product Comparison List Modifications

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in CS-Cart version 4.18.3. This vulnerability allows attackers to add products to a user's comparison list by sending a crafted HTTP request. The issue arises in the 'index.php' endpoint, where the comparison list functionality is managed.

Impact

Exploitation of this vulnerability enables attackers to perform actions on behalf of authenticated users, potentially leading to unauthorized modifications of user data or preferences. This could be used for user profiling, manipulation of user experience, or in conjunction with phishing or social engineering tactics.

Remediation

To address this vulnerability, it is recommended to implement CSRF tokens on all state-changing requests, validate 'Origin' and 'Referer' headers, and apply 'SameSite' attributes to cookies.