| शीर्षक | eladmin 2.7 Improper Access Controls |
|---|
| विवरण | The PUT /api/roles endpoint in eladmin v2.7 contains a critical authorization bypass vulnerability where attackers caneither demote high-privileged admin roles or escalate data access permissions by exploiting insufficient validationin the getLevels() method, which only checks if the submitted level value is greater than or equal to the user'scurrent level without verifying the target role's original permissions, allowing lower-privileged users (e.g.,level=3) to modify higher-privileged roles (e.g., level=1) by submitting a request with a level matching their own,while completely omitting the level field bypasses all checks and lets attackers arbitrarily modify the dataScopefield to "全部" (all data access) or other values, effectively enabling privilege escalation, unauthorized roledemotion, and global data access through direct manipulation of these unprotected parameters. |
|---|
| स्रोत | ⚠️ https://github.com/elunez/eladmin/issues/898 |
|---|
| उपयोगकर्ता | AliceS614 (UID 94277) |
|---|
| सबमिशन | 24/04/2026 04:24 PM (5 महीनों पहले) |
|---|
| संयम | 23/05/2026 08:31 AM (29 days later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 361917 [eladmin तक 2.7 Users API Endpoint UserController.java checkLevel अधिकार वृद्धि] |
|---|
| अंक | 0 |
|---|