SourceCodester Simple Cold Storage Management System cross-site request forgery

Vulnerability

A cross-site request forgery (CSRF) vulnerability exists in SourceCodester Simple Cold Storage Management System version 1.0. The issue is triggered via the manipulation of an unknown functionality related to the 'change password' argument. An attacker can craft a malicious request that, when executed by an authenticated administrator, changes the admin password. The exploit has been publicly disclosed [1].

Exploitation

The attack can be launched remotely. The attacker must trick an authenticated administrator into visiting a malicious page or clicking a crafted link. The attacker does not need prior authentication or special access; the victim's browser automatically sends the admin's session cookie with the forged request. The public exploit code demonstrates the full sequence [1].

Impact

Successful exploitation allows the attacker to change the administrator's password. Once the password is changed, the attacker can log in as admin and gain full control over the application, leading to complete compromise of confidentiality, integrity, and availability of the system.

Mitigation

As of the publication date (2022-10-18), no official patch from the vendor has been released. Mitigations include implementing CSRF tokens on all sensitive actions, verifying the 'Referer' header, and using custom request headers. The product appears to be in an unmaintained state; users should consider migrating to an alternative solution.