| शीर्षक | BKWLD Decoy 5.11.1 Improper Access Control / Authorization Bypass |
|---|
| विवरण | The privilege escalation vulnerability in BKWLD/decoy <= 5.11.1 allows any authenticated low-privilege administrator, such as a viewer, to promote themselves to a full administrator by appending sensitive fields like role=admin or custom permissions during a standard self-profile edit (/admin/admins/{own_id}/edit). This security flaw occurs because an authorization policy shortcut in Policy.php automatically permits self-updates before verifying roles, a controller guard fails to block the change since it relies on that same flawed policy, and mass-assignment protection in Base.php is disabled in the admin context. Consequently, attackers can completely bypass role-based access controls through a normal form submission without requiring any session hijacking or CSRF exploits |
|---|
| स्रोत | ⚠️ https://docs.google.com/document/d/1aMqfRWKalkL5v9tM5nIxrOWKLbN23KLyr0jSZtan4U4/edit?usp=sharing |
|---|
| उपयोगकर्ता | Rony Ahmed (UID 101886) |
|---|
| सबमिशन | 05/10/2026 09:10 PM (21 दिन पहले) |
|---|
| संयम | 26/10/2026 11:40 AM (21 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 426379 [BKWLD Decoy तक 5.11.1 Authorization Policy Policy.php role अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|