Security: Possible CSRF issue on the login page - Githubissues

sonatype-nexus-community / codetocloud-workshop

Other

1 stars 8 forks source link

Security: Possible CSRF issue on the login page #26

Open CoolGoose opened 1 year ago

CoolGoose commented 1 year ago

Details

https://github.com/sonatype-nexus-community/codetocloud-workshop/blob/main/src/main/resources/webgoat/templates/login.html

PoC

No csrf handling for the form

Impact

cross site request forgery :P