Race Condition in Definition Votes
U
Urban Dictionary
Submitted None
Actions:
Reported by
cablej
Vulnerability Details
Technical details and impact analysis
There exists a race condition vulnerability in definition votes, allowing any user to artificially manipulate the number of up/down votes for a definition by making asynchronous requests to vote. A malicious user can use this method to reach any number of up or down votes for a definition.
See the attached screenshot for an example.
POC:
1. Visit any definition.
2. Intercept a vote of the definition, such as with Chrome Developer tools or BurpSuite.
3. Make the opposite vote, so you are able to vote again.
4. Copy the vote request as a curl command, and in the command line execute the command in the format (command) & (command).
4. Revisit the vote. There will now be 2 votes cast, and a negative number of the opposite votes. This can be repeated by removing your vote and executing the request again.
Please let me know if you have any questions,
Jack
Report Details
Additional information and metadata
State
Closed
Substate
Resolved