Lucene search

GitHub_MCVELIST:CVE-2024-24573

HistoryJan 31, 2024 - 10:33 p.m.

CVE-2024-24573 facileManager Privilege Escalation via Mass Assignment

2024-01-3122:33:11

CWE-863

GitHub_M

www.cve.org

facilemanager

privilege escalation

mass assignment

web apps

user profile

post request

non-admin accounts

super user privileges

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.3%

JSON

facileManager is a modular suite of web apps built with the sysadmin in mind. In versions 4.5.0 and earlier, when a user updates their profile, a POST request containing user information is sent to the endpoint server/fm-modules/facileManager/ajax/processPost.php. It was found that non-admins can arbitrarily set their permissions and grant their non-admin accounts with super user privileges.

CNA Affected

[
  {
    "vendor": "WillyXJ",
    "product": "facileManager",
    "versions": [
      {
        "version": "<= 4.5.0",
        "status": "affected"
      }
    ]
  }
]

References

github.com/WillyXJ/facileManager/commit/0aa850d4b518f10143a4c675142b15caa5872877

github.com/WillyXJ/facileManager/security/advisories/GHSA-w67q-pp62-j4pf

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.3%

JSON

Related for CVELIST:CVE-2024-24573