https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 18:30:16 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-56721 <p>CamaleonCMS version 2.9.2 and earlier contains a privilege escalation vulnerability via insecure direct object reference (IDOR) that allows authenticated low-privileged attackers to overwrite any user&#39;s credentials by exploiting a parameter confusion flaw between the authorization filter and action body in the UsersController. Attackers can send a PATCH request to the updated_ajax endpoint setting params[:id] to their own user ID to pass the self-authorization check while simultaneously setting params[:user_id] to a victim&#39;s ID, causing the controller to load and mutate the victim&#39;s account, including overwriting administrator passwords to achieve full site takeover.</p> <p>CamaleonCMS version 2.9.2 and earlier contains a privilege escalation vulnerability via insecure direct object reference (IDOR) that allows authenticated low-privileged attackers to overwrite any user&#39;s credentials by exploiting a parameter confusion flaw between the authorization filter and action body in the UsersController. Attackers can send a PATCH request to the updated_ajax endpoint setting params[:id] to their own user ID to pass the self-authorization check while simultaneously setting params[:user_id] to a victim&#39;s ID, causing the controller to load and mutate the victim&#39;s account, including overwriting administrator passwords to achieve full site takeover.</p> https://db.gcve.eu/vuln/fkie_cve-2026-56721 https://db.gcve.eu/vuln/ghsa-m39h-f7fw-54qw <p>CamaleonCMS version 2.9.2 and earlier contains a privilege escalation vulnerability via insecure direct object reference (IDOR) that allows authenticated low-privileged attackers to overwrite any user&#39;s credentials by exploiting a parameter confusion flaw between the authorization filter and action body in the UsersController. Attackers can send a PATCH request to the updated_ajax endpoint setting params[:id] to their own user ID to pass the self-authorization check while simultaneously setting params[:user_id] to a victim&#39;s ID, causing the controller to load and mutate the victim&#39;s account, including overwriting administrator passwords to achieve full site takeover.</p> <p>CamaleonCMS version 2.9.2 and earlier contains a privilege escalation vulnerability via insecure direct object reference (IDOR) that allows authenticated low-privileged attackers to overwrite any user&#39;s credentials by exploiting a parameter confusion flaw between the authorization filter and action body in the UsersController. Attackers can send a PATCH request to the updated_ajax endpoint setting params[:id] to their own user ID to pass the self-authorization check while simultaneously setting params[:user_id] to a victim&#39;s ID, causing the controller to load and mutate the victim&#39;s account, including overwriting administrator passwords to achieve full site takeover.</p> https://db.gcve.eu/vuln/ghsa-m39h-f7fw-54qw