Kanboard's privilege escalation via mass assignment in user invite registration allows any invited user to become admin
概要
Kanboard's privilege escalation via mass assignment in user invite registration allows any invited user to become admin
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Kanboard is project management software focused on Kanban methodology. Prior to 1.2.51, Kanboard's user invite registration endpoint (UserInviteController::register()) accepts all POST parameters and passes them to UserModel::create() without filtering out the role field. An attacker who receives an invite link can inject role=app-admin in the registration form to create an administrator account. Version 1.2.51 fixes the issue.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov