CyberRota Analysis
AI-GeneratedCamaleonCMS versions 2.9.2 and earlier are vulnerable to a privilege escalation flaw that allows authenticated low-privileged users to overwrite any user's credentials, including those of administrators. By exploiting a parameter confusion issue in the UsersController, attackers can manipulate requests to gain unauthorized access and potentially take over the entire site. Organizations using affected versions should prioritize patching this vulnerability to mitigate the risk of account compromise and site takeover.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
CamaleonCMS version 2.9.2 and earlier contains a privilege escalation vulnerability via insecure direct object reference (IDOR) that allows authenticated low-privileged attackers to overwrite any user's credentials by exploiting a parameter confusion flaw between the authorization filter and action body in the UsersController. Attackers can send a PATCH request to the updated_ajax endpoint setting params[:id] to their own user ID to pass the self-authorization check while simultaneously setting params[:user_id] to a victim's ID, causing the controller to load and mutate the victim's account, including overwriting administrator passwords to achieve full site takeover.