Horizon Alert
Summary of the vulnerability and why it matters
A critical security vulnerability has been identified in Formbricks, an open-source platform used for surveys and data collection. The issue, which allows for unauthorized password resets, stems from improper verification of digital signatures in authentication tokens. This could potentially enable attackers to compromise user accounts if they can determine a victim's user ID. The primary concern at this time is to confirm whether Formbricks is in use and if there is any exposure.
- Unverified token signatures enable unauthorized password resets.
- Leadership should remember this for potential account compromise risks.
- Confirm Formbricks usage and exposure to internal systems.
Attack Path
How an attacker could exploit the issue
An attacker could exploit this vulnerability by crafting a malicious token to gain unauthorized access and reset a victim's password. This is possible because the system fails to properly verify the signature and other critical components of authentication tokens used in email verification and password reset processes. If an attacker knows a victim's user ID, they can construct a fake token to impersonate the victim.
- No special access required.
- Malicious token used for authentication.
- Unauthorized password reset.
Live Threat
Current exploitation, exposure, and threat context
This vulnerability could impact system data and user data by allowing an attacker to bypass authentication mechanisms. When supported by the advisory, this could enable an attacker to impersonate a user, potentially leading to unauthorized access and modification of their account information or data submitted through Formbricks.
- System and user data.
- Attacker crafts a malicious JWT.
- Unauthorized account access and data modification.
Operational Fix
Recommended remediation, mitigation, and detection steps
Real-world ownership likely falls to the team managing the Formbricks application and its underlying infrastructure. The first practical step is to identify all instances of Formbricks, determine their reachability from the internet, and assess their business criticality to prioritize remediation efforts.
- Identify Formbricks application instances.
- Verify internet reachability and criticality.
- Plan remediation based on exposure.
