| 标题 | Open-Source LitmusChaos 3.19.0 Privilege Escalation via Manipulation of localStorage |
|---|
| 描述 | A privilege escalation vulnerability was discovered in the LitmusChaos platform, where a user with Viewer-level permissions can elevate their privileges to Owner by tampering with the projectRole key stored in the browser’s localStorage. This manipulation is not validated by the backend, leading to unauthorized access to privileged functionality.
During analysis, it was observed that user roles within a project are determined on the client side using a localStorage key named projectRole. By modifying this key’s value from "Viewer" to "Owner" using browser developer tools and reloading the page, the frontend updates to reflect elevated access rights.
This change allows users to access Owner-only functionality, such as creating, modifying, or deleting experiments, without any backend verification of their actual role within the project.
Impact
Unauthorized privilege escalation
Potential misuse or alteration of experiments and project configurations
No server-side validation of user roles |
|---|
| 来源 | ⚠️ https://github.com/MaiqueSilva/VulnDB/blob/main/readme07.md |
|---|
| 用户 | maique (UID 88562) |
|---|
| 提交 | 2025-07-31 04時36分 (1 年前) |
|---|
| 管理 | 2025-08-09 07時34分 (9 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 319325 [LitmusChaos Litmus 直到 3.19.0 LocalStorage 权限提升] |
|---|
| 积分 | 20 |
|---|