| Название | YZNCMS YznCMS 2.1.5 Privilege Escalation |
|---|
| Описание | A security vulnerability has been identified in YznCMS up to 2.1.5.
The issue resides within the component /auth.group/add. An attacker can leverage this by sending a specially crafted request, leading to Privilege Escalation. In detail, YznCMS utilizes a Role-Based Access Control (RBAC) model, where the super administrator possesses all permissions, while regular administrators only have partial permissions. However, the system does not strictly restrict the permissions of regular administrators. Consequently, a regular administrator with only partial permissions can successfully create a super administrator.
Although a traditional functional exploit/PoC is not publicly disclosed to prevent immediate weaponization, the vulnerability is fully validated and documented by the official patch. The vendor has acknowledged the flaw and implemented input sanitization/proper access control to mitigate this risk. Please refer to the provided official fix commit link in the reference section for full source code modifications and technical diff details. |
|---|
| Источник | ⚠️ https://gitee.com/ken678/YZNCMS/commit/ed16cd7f7f73e0316ffa8a148d |
|---|
| Пользователь | danieluec (UID 61228) |
|---|
| Представление | 13.10.2026 01:41 (23 дни назад) |
|---|
| Модерация | 31.10.2026 08:01 (18 days later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 429502 [ken678 YznCMS до 2.2.0 Auth Group Group.php Backend эскалация привилегий] |
|---|
| Баллы | 20 |
|---|