CyberRota Analysis
AI-GeneratedFileGator is vulnerable due to its '/chmoditems' API endpoint, which accepts arbitrary Unix permission values and directly passes them to the PHP 'chmod()' function without validation. This flaw allows authenticated users with 'chmod' permissions to escalate their privileges to root, potentially compromising the entire system. Organizations using FileGator should prioritize patching this vulnerability to prevent unauthorized access and privilege escalation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
FileGator accepts arbitrary Unix permission values via the '/chmoditems' API endpoint and passes the value directly to PHP's native 'chmod()' function through 'octdec()' conversion, with no validation. This allows an authenticated user with 'chmod' permission to upgrade their privileges to root.
Related CVEs
Other vulnerabilities affecting the same vendor(s)