1764699 - CSRF in choosing solution in support.mozilla.org

Status: RESOLVED DUPLICATE of bug 1761746

(support.mozilla.org :: General, task)

Description

[haxatron1]

It is possible to trick the original question owner into choosing a solution to the problem via CSRF

POC:

1. Create a question
2. Answer the question, note the answer ID in the fragment of the URL after you answered the question. For example, for https://support.allizom.org/en-US/questions/1207236#answer-1082775, the answer ID is 1082775.
3. If a question owner clicks on the URL via a CSRF attack - https://support.allizom.org/en-US/questions/[Question]/solve/[Answer-ID], they will unknowingly answer the question.

Comment 1

[haxatron1]

(In reply to haxatron1 from comment #0)

It is possible to trick the original question owner into choosing a solution to the problem via CSRF

POC:

1. Create a question
2. Answer the question, note the answer ID in the fragment of the URL after you answered the question. For example, for https://support.allizom.org/en-US/questions/1207236#answer-1082775, the answer ID is 1082775.
3. If a question owner clicks on the URL via a CSRF attack - https://support.allizom.org/en-US/questions/[Question]/solve/[Answer-ID], they will unknowingly answer the question.

3. If a question owner clicks on the URL via a CSRF attack - https://support.allizom.org/en-US/questions/[Question-ID]/solve/[Answer-ID], they will unknowingly choose a solution

An attacker can use this to trick a user into choosing their answer.

Comment 3

[Frida K [:frida]]

Hello,

Thank you for your report.

Unfortunately, we already received a report about the same issue and we are working on addressing it.

Thanks,
Frida