{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/ab-download-manager--1.11.2/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:ab_download_manager:ab_download_manager:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.8,"id":"CVE-2026-121451"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["AB Download Manager (\u003c 1.11.2)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["AB Download Manager"],"content_html":"\u003cp\u003eAB Download Manager versions before 1.11.2 contain a cross-site request forgery (CSRF) vulnerability in the browser-integration API endpoint /start-headless-download. This vulnerability allows an unauthenticated attacker to write arbitrary files to locations on the user's system, including startup folders, to achieve code execution.\u003c/p\u003e\n\u003ch2 id=\"attack-chain\"\u003eAttack Chain\u003c/h2\u003e\n\u003col\u003e\n\u003cli\u003eAttacker hosts a malicious webpage containing a cross-site request forgery (CSRF) payload.\u003c/li\u003e\n\u003cli\u003eA targeted user with AB Download Manager installed navigates to the malicious webpage.\u003c/li\u003e\n\u003cli\u003eThe browser automatically sends a cross-site POST request to the local AB Download Manager API at /start-headless-download.\u003c/li\u003e\n\u003cli\u003eThe API processes the request due to the lack of CSRF protection.\u003c/li\u003e\n\u003cli\u003eThe attacker-controlled parameters (\u0026quot;folder\u0026quot; and \u0026quot;name\u0026quot;) are used to write a file to an arbitrary path on the host filesystem.\u003c/li\u003e\n\u003cli\u003eIf a payload is written to a system startup directory, it executes upon the user's next login or reboot.\u003c/li\u003e\n\u003c/ol\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade AB Download Manager to version 1.11.2 or later immediately.\u003c/li\u003e\n\u003cli\u003ePatching information is available via the project repository: \u003ca href=\"https://github.com/amir1376/ab-download-manager/commit/34cd27af6a9a6c2046af112bc9bd34828fec0bbc\"\u003ehttps://github.com/amir1376/ab-download-manager/commit/34cd27af6a9a6c2046af112bc9bd34828fec0bbc\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-03T21:27:58Z","date_published":"2026-11-03T21:27:58Z","id":"https://feed.craftedsignal.io/briefs/2026-11-cve-2026-121451/","summary":"AB Download Manager versions prior to 1.11.2 are vulnerable to a cross-site request forgery attack allowing unauthenticated remote attackers to write arbitrary files to the filesystem, potentially facilitating remote code execution.","title":"AB Download Manager: Unauthenticated arbitrary file write via CSRF (CVE-2026-121451)","url":"https://feed.craftedsignal.io/briefs/2026-11-cve-2026-121451/"}],"language":"en","title":"CraftedSignal Threat Feed - AB Download Manager (\u003c 1.11.2)","version":"https://jsonfeed.org/version/1.1"}