PT-2021-11388 · Unknown · Booking Core - Ultimate Booking System

Published 2021-07-14 · Updated 2021-07-16 · CVE-2020-27379

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions: Booking Core - Ultimate Booking System version 1.7.0

Description: A CSRF issue allows unauthorized changes to a user's email ID when a request is sent using the GET method, as the CSRF token is not validated. This can lead to password reset issues, where a new password is sent to the modified email ID.

Recommendations: For version 1.7.0, ensure that the CSRF token is properly validated for all request methods, including GET, to prevent unauthorized changes to user email IDs. As a temporary workaround, consider restricting the ability to change email IDs or implementing additional validation for password reset requests until a proper fix is applied.

Exploit

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2020-27379

Affected Products

Booking Core - Ultimate Booking System

References · 4

• 🔥 https://medium.com/@singh.satyam158/vulnerabilities-in-booking-core-1-7-d85d1dfae44e · Exploit
• https://osv.dev/vulnerability/CVE-2020-27379 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-27379 · Security Note
• https://medium.com/%40singh.satyam158/vulnerabilities-in-booking-core-1-7-d85d1dfae44e · Note