| 제목 | Open-Source Web LitmusChaos 3.19.0 Privilege Chaining |
|---|
| 설명 | A critical privilege escalation vulnerability was identified in the LitmusChaos platform, which allows a low-privileged user to gain elevated privileges (from Viewer to Owner) over a project by tampering with the role value in the response of the /auth/list_projects endpoint. This flaw results in unauthorized actions being performed on resources that should be read-only for the user. |
|---|
| 원천 | ⚠️ https://github.com/MaiqueSilva/VulnDB/blob/main/readmi1.md |
|---|
| 사용자 | maique (UID 88562) |
|---|
| 제출 | 2025. 07. 31. AM 01:52 (1 년도 ago) |
|---|
| 모더레이션 | 2025. 08. 09. AM 07:34 (9 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 319319 [LitmusChaos Litmus 까지 3.19.0 /auth/list_projects role 권한 상승] |
|---|
| 포인트들 | 20 |
|---|