A remote unauthenticated attacker can submit a crafted request to this endpoint to create a new user with administrator privileges. Because the endpoint lacks proper authentication and authorization checks, the attacker gains persistent administrative access to the application.

Impact includes:

• Creation of persistent admin accounts.
• Full administrative takeover of the web application.
• Potential lateral movement, data exfiltration, and destructive actions.

🛠️ Requirements

• Burp Suite (recommended) or any HTTP proxy that accepts raw HTTP requests.
• curl, nc/netcat, or socat for manual testing if you prefer CLI.
• Access to CVE-2025-10352-POC.txt (raw HTTP request exported from Burp).
• Authorization to test the target system (see legal notice).

🧪 Usage

Basic check (Burp Repeater)

1. Open Burp → Repeater.
2. Open CVE-2025-10352-POC.txt, copy the raw HTTP request.
3. Paste into a new Repeater tab, set the proper host and press Send.
4. Check response for success (200/201/302 or JSON/text confirming creation).
5. Attempt login with the created credentials or confirm via the user listing endpoint.

⚠️ Disclaimer

This document is for authorized security testing and remediation only. Do not use the PoC or reproduction steps against systems you do not own or do not have explicit permission to test. The author is not responsible for misuse.

Made with ❤️ by Manuel Iván San Martín Castillo