A newly discovered Cross-Site Request Forgery (CSRF) vulnerability has been identified in Best Restaurant Menu, a popular extension developed by PriceListo. The vulnerability, designated as CVE-2023-47649, allows attackers to perform unauthorized actions on a user's behalf without their consent or knowledge. This could lead to information disclosure, unauthorized changes to the restaurant menu, or other undesirable outcomes.

Affected Versions

Best Restaurant Menu by PriceListo, versions n/a through 1.3.1.

Exploit Details

The vulnerable extension does not properly implement anti-CSRF tokens within its form handling process, making it susceptible to CSRF attacks. An attacker could craft malicious HTML pages or send email messages containing specially crafted content that, when visited by the victim, would execute unauthorized requests against the website hosting the vulnerable Best Restaurant Menu extension.

The following code snippet illustrates a simple example of a CSRF attack targeting the Best Restaurant Menu extension:

<html>
<body>
  <h1>Click the button below to get a discount on your next meal!</h1>
  <form method="post" action="https://target-website.com/best-restaurant-menu/vulnerable">;
    <input type="hidden" name="menu_item" value="Delicious Burger" />
    <input type="hidden" name="new_price" value=".01" />
    <input type="submit" value="Click for Discount" />
  </form>
</body>
</html>

In this example, the malicious form attempts to change the price of a menu item called "Delicious Burger" to $.01. When a user clicks the "Click for Discount" button, the unauthorized request is executed, potentially leading to unauthorized changes within the targeted system.

For further technical details and exploit examples, please refer to the original reference from the CVE-2023-47649 Vulnerability Advisory.

Mitigation & Recommendations

To mitigate this vulnerability, it is recommended that users of the affected PriceListo Best Restaurant Menu extension update their installations to the latest available version (1.3.2 or later). Additionally, website administrators should consider implementing proper anti-CSRF token mechanisms to protect their applications from CSRF attacks.

For further information on how to protect your web application from CSRF attacks, consider reviewing the OWASP CSRF Prevention Cheat Sheet.

Conclusion

CVE-2023-47649 represents a significant security risk for users of the affected PriceListo Best Restaurant Menu extension. Immediate action should be taken to address this vulnerability by updating the extension and implementing proper security measures to prevent unauthorized access and changes to critical information.

Timeline

Published on: 11/18/2023 22:15:08 UTC
Last modified on: 11/25/2023 02:11:10 UTC