Vulnerability · Published Jan 31, 2024 · Assigned by GitHub_M

CVE-2024-24573facileManager Privilege Escalation via Mass Assignment

High 8.8

In plain English

A high-severity incorrect authorization in facileManager from WillyXJ. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 57% of all known vulnerabilities).

Severity (CVSS 3.1)8.8High

Exploit odds (30 days)0.8%top 42.7% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

facileManager is a modular suite of web apps built with the sysadmin in mind. In versions 4.5.0 and earlier, when a user updates their profile, a POST request containing user information is sent to the endpoint server/fm-modules/facileManager/ajax/processPost.php. It was found that non-admins can arbitrarily set their permissions and grant their non-admin accounts with super user privileges.

Affected products (as reported)

Vendor	Product	Versions
WillyXJ	facileManager	<= 4.5.0

Weakness: CWE-863 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References

https://github.com/WillyXJ/facileManager/security/advisories/GHSA-w67q-pp62-j4pf x_refsource_CONFIRM
https://github.com/WillyXJ/facileManager/commit/0aa850d4b518f10143a4c675142b15caa5872877 x_refsource_MISC