PT-2023-7576 · Unknown · Sticky Notes App Using Php With Source Code

Emirhanerdogu · Publicado 2023-11-22 · Atualizado 2023-12-04 · CVE-2023-47014

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Sticky Notes App Using PHP with Source Code version 1.0

Description The issue is related to a Cross-Site Request Forgery (CSRF) vulnerability. This vulnerability can be exploited by a remote attacker to gain access to confidential information. The exploitation involves sending a crafted payload to the add-note.php endpoint, allowing the attacker to obtain sensitive information.

Recommendations For Sticky Notes App Using PHP with Source Code version 1.0, consider disabling access to the add-note.php endpoint until a patch is available to prevent exploitation of the CSRF vulnerability. Restricting access to this endpoint can help minimize the risk of sensitive information being obtained by an attacker.

Exploit

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

BDU:2023-08632

CVE-2023-47014

Produtos afetados

Sticky Notes App Using Php With Source Code

Referências · 7

• 🔥 https://github.com/emirhanerdogu/CVE-2023-47014-Sticky-Notes-App-Using-PHP-with-Source-Code-v1.0-CSRF-to-CORS/blob/main/README.md · Exploit
• https://osv.dev/vulnerability/CVE-2023-47014 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2023-08632 · Nota de Segurança
• https://t.me/cvenotify/61399 · Publicação no Telegram
• https://twitter.com/PentestingN/status/1731580813181923759 · Publicação no Twitter
• https://t.me/cybersecuritytechnologies/9510 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-47014 · Nota de Segurança