| शीर्षक | liufee cms 2.1.1 Improper Privilege Management |
|---|
| विवरण | A vulnerability has been found in Feehi CMS 2.1.1 and classified as critical. Affected is the PUT handler of the /api/users/{id} endpoint. The manipulation leads to privilege escalation. The attack can be initiated remotely. An authenticated user can modify any other user's password and email via an IDOR (Insecure Direct Object Reference) flaw, and subsequently log in as the victim, achieving full account takeover. |
|---|
| स्रोत | ⚠️ https://github.com/liufee/cms/issues/90 |
|---|
| उपयोगकर्ता | byname (UID 98259) |
|---|
| सबमिशन | 29/05/2026 10:00 AM (4 महीनों पहले) |
|---|
| संयम | 28/06/2026 12:57 PM (1 month later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 374552 [Feehi CMS तक 2.1.1 API /api/users अधिकार वृद्धि] |
|---|
| अंक | 0 |
|---|