ثغرة CSRF في redaxo core

الملخص

REDAXO before 5.21.3 contains a cross-site request forgery vulnerability in the backend user administration page (users/users) because the CSRF token check only runs when the save parameter is set, while the update path triggered by FUNC_UPDATE does not require it. Attackers can lure a logged-in backend user with the users[] permission to a crafted GET link to grant administrator rights, deactivate accounts, or lock out the sole administrator.

المعالجة

1. أحصِ جميع نشرات redaxo core، بما فيها بيئات الاختبار.
2. رقِّ redaxo core إلى الإصدار 5.21.3.
3. تحقق من الإصدار العامل بعد الترقية.

المراجع

• تحذيرhttps://github.com/redaxo/core/security/advisories/GHSA-mrrj-4f5x-j958
• تحذيرhttps://www.vulncheck.com/advisories/redaxo-before-5.21.3-csrf-token-bypass-via-users-users-privilege-escalation