PT-2023-7576 · Unknown · Sticky Notes App Using Php With Source Code

Emirhanerdogu · Published 2023-11-22 · Updated 2023-12-04 · CVE-2023-47014

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Sticky Notes App Using PHP with Source Code version 1.0

Description The issue is related to a Cross-Site Request Forgery (CSRF) vulnerability. This vulnerability can be exploited by a remote attacker to gain access to confidential information. The exploitation involves sending a crafted payload to the add-note.php endpoint, allowing the attacker to obtain sensitive information.

Recommendations For Sticky Notes App Using PHP with Source Code version 1.0, consider disabling access to the add-note.php endpoint until a patch is available to prevent exploitation of the CSRF vulnerability. Restricting access to this endpoint can help minimize the risk of sensitive information being obtained by an attacker.

Exploit

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

BDU:2023-08632

CVE-2023-47014

Affected Products

Sticky Notes App Using Php With Source Code

References · 7

• 🔥 https://github.com/emirhanerdogu/CVE-2023-47014-Sticky-Notes-App-Using-PHP-with-Source-Code-v1.0-CSRF-to-CORS/blob/main/README.md · Exploit
• https://osv.dev/vulnerability/CVE-2023-47014 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-08632 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-47014 · Security Note
• https://t.me/cvenotify/61399 · Telegram Post
• https://twitter.com/PentestingN/status/1731580813181923759 · Twitter Post
• https://t.me/cybersecuritytechnologies/9510 · Telegram Post