CSRF in ConvertX File Conversion Service

Executive Summary

ConvertX is a self-hosted file conversion service. Before version 0.18.0, the /delete/{id} endpoint uses HTTP GET for permanent deletion without CSRF protection. An authenticated user visiting attacker-controlled content could trigger this endpoint via their browser, sending their session cookie and deleting the targeted job, causing unauthorized loss of converted-file history.

Useful 0 Not Useful 0

Detection Guidance

Check ConvertX server logs for suspicious GET requests to /delete/{id} endpoints. Monitor network traffic for repeated unauthorized deletion attempts targeting job IDs. Verify if CSRF tokens are enforced in API requests.

Useful 0 Not Useful 0

Impact Analysis

If you use ConvertX before version 0.18.0, an attacker could trick you into visiting a malicious page that deletes your converted files without your consent. This could result in permanent loss of important file history and disrupt your workflow.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to unauthorized deletion of files, potentially violating data integrity and retention requirements under GDPR or HIPAA. Loss of converted-file history may also hinder compliance audits or data subject requests.

Useful 0 Not Useful 0

Mitigation Strategies

Upgrade ConvertX to version 0.18.0 or later. Disable HTTP GET for deletion endpoints if possible. Implement CSRF protection for all state-changing requests. Review and restrict user permissions to prevent unauthorized deletions.

Useful 0 Not Useful 0