CyberRota Analysis
AI-GeneratedA vulnerability in the Route-Level Middleware of coollabsio Coolify versions up to 4.1.2 allows for missing authorization due to improper handling in the CanUpdateResource.php file, potentially enabling remote exploitation. This high-severity flaw could allow unauthorized users to manipulate resources, posing a significant security risk. Organizations using affected versions should prioritize upgrading to version 4.2.0 to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A flaw has been found in coollabsio Coolify up to 4.1.2. The affected element is an unknown function of the file app/Http/Middleware/CanUpdateResource.php of the component Route-Level Middleware. Executing a manipulation can lead to missing authorization. The attack may be launched remotely. The exploit has been published and may be used. Upgrading to version 4.2.0 is sufficient to fix this issue. This patch is called 39ae16de4248075de8c08f3259114e064b20d52d. It is advisable to upgrade the affected component.