Description
An Insecure Direct Object Reference (IDOR) in Pagekit CMS v1.0.18 allows attackers to escalate privileges.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | pagekit/pagekit | <= 1.0.18 | — | GHSA-w3j8-9p3j-3wjx |
Critical · 9.8
CVE-2025-67165
EUVD-2025-203905GHSA-w3j8-9p3j-3wjx
Pagekit CMS has an Insecure Direct Object Reference (IDOR) in its User Role component
Published Dec 17, 2025 · Updated Dec 17, 2025 · Assigned by mitre