Laundry Cross-Site Request Forgery Vulnerability Allowing Account Takeover
Vulnerability
A Cross-Site Request Forgery (CSRF) vulnerability has been identified in Laundry version 2.3.0, running on Linux and MacOS. This vulnerability allows for an account takeover by exploiting the application's lack of proper CSRF protection. Users can be tricked into clicking a malicious link that performs unauthorized actions on their behalf, such as changing passwords.
Impact
Exploitation of this vulnerability allows for unauthorized account access, enabling an attacker to take over a user's account.
Reproduction
To reproduce this vulnerability, send a CSRF attack that targets the 'change_pass.php' script within the 'laundry/data' directory. The request must include a POST parameter named 'pwd' with the value set to the desired password. When the victim clicks the malicious link, the password will be changed to the one specified, effectively taking over the account.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.