CyberRota Analysis
AI-GeneratedCoollabsio Coolify versions up to 4.1.1 contain a vulnerability in the Policy Handler component, specifically within an unknown function in the /app/Policies/ directory, which allows for missing authorization. This flaw enables remote exploitation, potentially allowing attackers to manipulate policies without proper authorization. Organizations using affected versions should prioritize patching this vulnerability to mitigate the risk of unauthorized access and policy manipulation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was detected in coollabsio Coolify up to 4.1.1. The impacted element is an unknown function of the file /app/Policies/ of the component Policy Handler. Performing a manipulation results in missing authorization. Remote exploitation of the attack is possible. The exploit is now public and may be used.