Skip to content
OpenAdvisories

Vendor

owen2345

18 known vulnerabilities.

Products

Camaleon CMS 10 CamaleonCMS 8
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 5.4
    CVE-2026-120430

    Camaleon CMS before 2.9.2 IDOR via Admin::CategoriesController

    Camaleon CMS before 2.9.2 contains an insecure direct object reference vulnerability in Admin::CategoriesController that allows authenticated users to modify unauthorized categories by referencing arbitrary category IDs. Users authorized for one post type can…

    owen2345 Camaleon CMS
  • Medium 5.4
    CVE-2026-102261 Public exploit

    owen2345 Camaleon CMS Media Crop media_controller.rb crop authorization

    A flaw has been found in owen2345 Camaleon CMS up to 2.9.2. Impacted is the function crop of the file app/controllers/camaleon_cms/admin/media_controller.rb of the component Media Crop Handler. This manipulation of the argument saved_avatar causes authorizati…

    owen2345 Camaleon CMS
  • Medium 6.4
    CVE-2026-86100

    Camaleon CMS 2.7.5 through 2.9.1 SSRF via HTTP Redirect in Upload from URL

    Camaleon CMS versions 2.7.5 through 2.9.1 fail to validate redirect targets when fetching remote files in the Upload from URL media feature. Authenticated attackers can supply URLs that pass initial validation but redirect to internal network addresses, allow…

    owen2345 CamaleonCMS
  • Medium 6.6
    CVE-2026-73330

    CamaleonCMS 2.9.1 Server-Side Template Injection via test_email Action

    CamaleonCMS 2.9.1 contains a server-side template injection vulnerability that allows authenticated administrators to execute arbitrary commands by embedding ERB tags in the email parameter of the test_email settings action, which are evaluated when an SMTP r…

    owen2345 CamaleonCMS
  • Medium 4.3
    CVE-2026-56720

    CamaleonCMS 2.9.2 and earlier Missing Authorization via profile Action

    CamaleonCMS version 2.9.2 and earlier contains a missing authorization vulnerability in the admin users controller that allows any authenticated user to access any other user's profile data by supplying an arbitrary user ID parameter. Attackers can send a GET…

    owen2345 CamaleonCMS
  • Medium 4.3
    CVE-2026-67616

    Camaleon CMS 2.9.2 Missing Authorization via /admin/post_type drafts endpoint

    Camaleon CMS through 2.9.2, fixed in commit 88ab703, contains a missing authorization vulnerability on the drafts endpoint that allows any authenticated low-privileged user to create draft posts by bypassing role and permission checks. Attackers can send requ…

    owen2345 Camaleon CMS
  • Medium 6.0
    CVE-2026-1776

    Camaleon CMS AWS Uploader Authenticated Path Traversal Arbitrary File Read

    Camaleon CMS versions 2.4.5.0 through 2.9.0, prior to commit f54a77e, contain a path traversal vulnerability in the AWS S3 uploader implementation that allows authenticated users to read arbitrary files from the web server’s filesystem. The issue occurs in th…

    owen2345 Camaleon CMS camaleon_cms RubyGems