A critical authorization bypass vulnerability in CamaleonCMS allows authenticated users to escalate privileges and gain unauthorized control over the platform.

The vulnerability is an authorization bypass (CWE-639) caused by user-controlled keys within the users controller. An attacker with low-level authenticated access can manipulate parameters to bypass security checks, leading to total technical impact on the application.

With a CVSS score of 8.8, this vulnerability poses a severe threat to data confidentiality and integrity. If exploited, an authenticated user could gain administrative privileges, leading to unauthorized data modification, account takeover, or full application compromise.

Immediate Action: Review the vendor advisory for the latest security release or apply the fix provided in the referenced GitHub pull request (PR #1185).

Proactive Monitoring: Monitor access logs for unusual administrative actions or unauthorized attempts to access protected user management endpoints by non-admin accounts.

Compensating Controls: Implement strict role-based access control (RBAC) audits and utilize a Web Application Firewall to block requests containing suspicious or malformed parameter keys.

Public Exploit Available: Unknown

Administrators must prioritize updating CamaleonCMS to a version containing the official fix. Until an update is applied, minimize the number of active user accounts and perform a thorough audit of current user privileges to limit the potential blast radius of a successful exploit.