An authorization bypass vulnerability in the Wolf CMS BackupRestoreController allows authenticated attackers to perform unauthorized administrative actions on the platform.

This is an Incorrect Comparison (CWE-697) vulnerability that leads to an authorization bypass, allowing authenticated users to manipulate the backup and restore functionality beyond their intended privilege levels.

The CVSS score of 8.8 reflects the high risk associated with this authorization bypass. An attacker could potentially restore malicious site configurations, overwrite existing data, or disrupt service availability, resulting in significant operational impact and data integrity loss.

Immediate Action: Apply vendor security updates as soon as they become available and review the permissions associated with the backup and restore modules.

Proactive Monitoring: Audit administrative logs for unauthorized access or execution attempts related to the BackupRestoreController.

Compensating Controls: Utilize a Web Application Firewall to enforce strict access control policies on sensitive administrative endpoints within the CMS.

Public Exploit Available: Unknown

Security teams must treat this authorization bypass as a priority, especially in environments where multiple users have access to the administrative console. Until a patch is applied, restrict access to the backup and restore features to a limited subset of highly trusted administrators.