CVE-2021-29349 PoC — Catalyst IT Mahara 跨站请求伪造漏洞

Source

https://github.com/Vulnmachines/CVE-2021-29349

Associated Vulnerability

Title:Catalyst IT Mahara 跨站请求伪造漏洞 (CVE-2021-29349)
Description:Catalyst It Catalyst IT Mahara是新西兰Catalyst IT（Catalyst It）公司的一套社交网络系统。该系统包含博客、履历表生成器、文件管理器等。 Mahara 20.10 存在跨站请求伪造漏洞，攻击者可利用该漏洞删除服务器上的inbox-mail。

Description

CVE-2021-29349 CSRF to remove all messages in Mahara 20.10

Readme

# CVE-2021-29349
CVE-2021-29349 CSRF to remove all messages in Mahara 20.10

Payload and Credit https://github.com/0xBaz

File Snapshot


 [4.0K]  /data/pocs/b7ce0454ffa1842d78dbe373f11ae189560e97b3
├── [ 818]  payload
└── [ 121]  README.md

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!