| タイトル | YZNCMS YznCMS 2.1.5 Privilege Escalation |
|---|
| 説明 | A security vulnerability has been identified in YznCMS up to 2.1.5.
The issue resides within the component /auth.group/add. An attacker can leverage this by sending a specially crafted request, leading to Privilege Escalation. In detail, YznCMS utilizes a Role-Based Access Control (RBAC) model, where the super administrator possesses all permissions, while regular administrators only have partial permissions. However, the system does not strictly restrict the permissions of regular administrators. Consequently, a regular administrator with only partial permissions can successfully create a super administrator.
Although a traditional functional exploit/PoC is not publicly disclosed to prevent immediate weaponization, the vulnerability is fully validated and documented by the official patch. The vendor has acknowledged the flaw and implemented input sanitization/proper access control to mitigate this risk. Please refer to the provided official fix commit link in the reference section for full source code modifications and technical diff details. |
|---|
| ソース | ⚠️ https://gitee.com/ken678/YZNCMS/commit/ed16cd7f7f73e0316ffa8a148d |
|---|
| ユーザー | danieluec (UID 61228) |
|---|
| 送信 | 2026年10月13日 01:41 (23 日 ago) |
|---|
| モデレーション | 2026年10月31日 08:01 (18 days later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 429502 [ken678 YznCMS 迄 2.2.0 Auth Group Group.php Backend 特権昇格] |
|---|
| ポイント | 20 |
|---|