Parse Dashboard Missing CSRF Protection on Agent Endpoint

Vulnerability

Overview

Parse Dashboard versions 7.3.0-alpha.42 through 9.0.0-alpha.7 contain a missing Cross-Site Request Forgery (CSRF) protection vulnerability in the AI Agent API endpoint (POST /apps/:appId/agent). The endpoint does not validate the origin of requests, making it susceptible to CSRF attacks [2][3].

Attack

Vector and Prerequisites

An attacker can craft a malicious web page that, when visited by an authenticated Parse Dashboard user, silently submits requests to the vulnerable agent endpoint using the victim's active session. The attack requires no special privileges beyond the victim being logged into the dashboard, and the attacker does not need to be on the same network [2].

Impact

Successful exploitation allows the attacker to perform any action available through the AI Agent endpoint on behalf of the victim. This could include manipulating AI agent configurations or executing agent-related operations, potentially leading to unauthorized data access or system changes [2][3].

Mitigation

The vulnerability is fixed in version 9.0.0-alpha.8, which adds CSRF middleware to the agent endpoint and embeds a CSRF token in the dashboard page [4]. As a workaround, administrators can remove the agent configuration block from their dashboard configuration; dashboards without an agent config are not affected [3].