PT-2021-11732 · Unknown · Vert.X-Web
Xhelal Likaj
+1
·
Published
2021-01-20
·
Updated
2021-04-22
·
CVE-2020-35217
CVSS v3.1
8.8
High
| Vector | AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
Vert.x-Web framework versions 4.0 milestone 1 through 4.0 milestone 4
Description:
The issue arises from incorrect CSRF verification. Instead of comparing the CSRF token in the request with the CSRF token in the cookie, the framework compares the CSRF token in the cookie against a CSRF token stored in the session. This means an attacker does not need to provide a CSRF token in the request, as the verification will always succeed due to the automatic sending of cookies by the browser, leading to a successful CSRF attack.
Recommendations:
For versions 4.0 milestone 1 through 4.0 milestone 4, consider disabling the CSRF verification mechanism until a patch is available, or apply a custom fix to correctly compare the CSRF token in the request with the one in the cookie. Restrict access to sensitive operations that rely on CSRF protection to minimize the risk of exploitation.
Fix
CSRF
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Vert.X-Web