CyberRota Analysis
AI-GeneratedThe vulnerability allows any authenticated user of the Kirby Panel to retrieve the full plaintext commercial license key through a GET request to the modules/activate dialog endpoint, due to insufficient access controls in the activate dialog handler. This information disclosure can lead to unauthorized activation of the plugin on third-party installations, potentially impacting the integrity of the software's licensing. Organizations using affected versions of Kirby modules should prioritize patching to mitigate the risk of license key theft and unauthorized usage.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
kirby-modules through 5.5.7, fixed in commit 315417e, contains an information disclosure vulnerability that allows any authenticated Kirby Panel user to retrieve the full plaintext commercial license key by sending a GET request to the modules/activate dialog endpoint. The plugin's activate dialog handler in lib/areas.php returns the complete key via ModulesLicense::readKey() without performing an administrator check, as the dialog is gated only by the access.system permission which defaults to true for all non-admin roles, enabling attackers to use the disclosed key to activate the plugin on arbitrary third-party installations.