🛠️ Technical Description

The vulnerability exists due to the absence of anti-CSRF tokens in the Sell Done Storefront v.1.0 web application. This allows an attacker to craft malicious requests that can be executed by an authenticated user without their knowledge, leading to privilege escalation.

Affected Code

The vulnerable code is located in the following file:

• index.html

How It Works

1. An attacker creates a malicious HTML form or script designed to perform a privileged action (e.g., changing user roles).
2. The attacker tricks an authenticated user into visiting a page containing the malicious form/script.
3. The user’s browser sends a request to the vulnerable application, executing the privileged action without the user’s consent.

⚠️ Impact

If exploited, this vulnerability could allow a remote attacker to:

• Escalate privileges and gain unauthorized access to sensitive functionalities.
• Perform actions on behalf of authenticated users without their knowledge.

🛡️ Remediation

The vendor has been notified, and the issue has been patched. To mitigate this vulnerability:

1. Update to the latest version of Sell Done Storefront.
2. Implement anti-CSRF tokens in all state-changing requests.
3. Validate and sanitize all user inputs to prevent similar vulnerabilities.

📚 References

• CVE Mitre Entry
• Sell Done Storefront GitHub Repository
• OWASP CSRF Prevention Cheat Sheet

📜 License

This repository is licensed under the MIT License. Feel free to use the information provided here for educational or research purposes.

Disclaimer: This repository is intended for educational and informational purposes only. The discoverer is not responsible for any misuse of the information provided.3. The user's browser sends a request to the vulnerable application, executing the privileged action without the user's knowledge.

Note: A full PoC is not provided here to prevent misuse. Responsible disclosure practices have been followed.