[FD] EditMe CMS - CSRF Privilege Escalate Web Vulnerability

Document Title: =============== EditMe CMS - CSRF Privilege Escalate Web Vulnerability References (Source): ==================== http://ift.tt/2eWQf4t Release Date: ============= 2016-11-14 Vulnerability Laboratory ID (VL-ID): ==================================== 1996 Common Vulnerability Scoring System: ==================================== 2.8 Product & Service Introduction: =============================== EditMe is a framework that serves as a Platform as a Service to build custom Web Applications, Web Prototyping,and Web CMS. CMS in which any page can be a server side script that implements whatever dynamic functionality you dream up. That's EditMe. No FTP servers, compilers or IDEs required. EditMe's API uses server-side JavaScript and our templates use XML, so there are no new languages to lear. (Copy of the Vendor Homepage: http://www.editme.com/ ) Abstract Advisory Information: ============================== An independent vulnerability laboratory researcher discovered a csrf privilege escalate web vulnerability in the official EditMe content managament system. Vulnerability Disclosure Timeline: ================================== 2016-11-14: Public Disclosure (Vulnerability Laboratory) Discovery Status: ================= Published Exploitation Technique: ======================= Remote Severity Level: =============== Medium Technical Details & Description: ================================ A cross site request forgery vulnerability has been discovered in the official EditMe content managament system. The vulnerability allows to perform malicious client-side web-application requests to execute non-protected functions with own web context. In the absence of security token, an attacker could execute arbitrary code in the administrators browser to gain unauthorized access to the administrator access privileges. Proof of Concept (PoC): ======================= Cross site request forgery web vulnerability can be exploited by malicious web application without privileged user account and without user interaction. To demonstrate safety or reproduce csrf web vulnerability information and follow the steps below to continue provided.

Source: Gmail -> IFTTT-> Blogger