| 제목 | YZNCMS YznCMS 2.1.5 Privilege Escalation |
|---|
| 설명 | A security vulnerability has been identified in YznCMS up to 2.1.5.
The issue resides within the component /auth.group/add. An attacker can leverage this by sending a specially crafted request, leading to Privilege Escalation. In detail, YznCMS utilizes a Role-Based Access Control (RBAC) model, where the super administrator possesses all permissions, while regular administrators only have partial permissions. However, the system does not strictly restrict the permissions of regular administrators. Consequently, a regular administrator with only partial permissions can successfully create a super administrator.
Although a traditional functional exploit/PoC is not publicly disclosed to prevent immediate weaponization, the vulnerability is fully validated and documented by the official patch. The vendor has acknowledged the flaw and implemented input sanitization/proper access control to mitigate this risk. Please refer to the provided official fix commit link in the reference section for full source code modifications and technical diff details. |
|---|
| 원천 | ⚠️ https://gitee.com/ken678/YZNCMS/commit/ed16cd7f7f73e0316ffa8a148d |
|---|
| 사용자 | danieluec (UID 61228) |
|---|
| 제출 | 2026. 10. 13. AM 01:41 (23 날 ago) |
|---|
| 모더레이션 | 2026. 10. 31. AM 08:01 (18 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 429502 [ken678 YznCMS 까지 2.2.0 Auth Group Group.php Backend 권한 상승] |
|---|
| 포인트들 | 20 |
|---|