Summary
The DeepAI.org endpoint `https://api.deepai.org/change_user_email` accepts POST requests without any CSRF protection. If a logged-in user is tricked into visiting a malicious HTML page, an attacker can change the user's email address to their own and take over the account via password reset.
Vulnerabilities 1
-
Medium 5.0
DeepAI api.deepai.org/change_user_email CSRF
The DeepAI endpoint 'https://api.deepai.org/change_user_email' accepts POST requests without any CSRF protection. If an attacker can trick a logged-in user into clicking a malicious link, the attacker can change the user's email address and take over their ac…
Revision history
-
#1.0.0
Initial publication