CVE-2025-2304
EPSS 0.21%Camaleon CMS Vulnerable to Privilege Escalation through a Mass Assignment
發布日:2025/3/14修改日:2025/3/19
描述
A Privilege Escalation through a Mass Assignment exists in Camaleon CMS When a user wishes to change his password, the 'updated_ajax' method of the UsersController is called. The vulnerability stems from the use of the dangerous permit! method, which allows all parameters to pass through without any filtering.
受影響套件(1)
- RubyGems/camaleon_cmsfrom 0, < 2.9.1
CVSS 分數
| 來源 | 版本 | 嚴重程度 | 向量 |
|---|---|---|---|
| osv | CVSS 4.0 | — | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H |
參考連結(7)
- ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2025-2304
- PATCHhttps://github.com/owen2345/camaleon-cms
- WEBhttps://github.com/owen2345/camaleon-cms/commit/179fd6b1ecf258d3e214aebfa87ac4a322ea4db4
- WEBhttps://github.com/owen2345/camaleon-cms/pull/1109
- WEBhttps://github.com/owen2345/camaleon-cms/releases/tag/2.9.1
- WEBhttps://github.com/rubysec/ruby-advisory-db/blob/master/gems/camaleon_cms/CVE-2025-2304.yml
- WEBhttps://www.tenable.com/security/research/tra-2025-09