Description
Camaleon CMS 2.9.2 contains an improper authorization vulnerability in the administrator draft autosave endpoint. A low-privileged authenticated user can send an arbitrary post_id to POST /admin/post_type/<POST_TYPE_ID>/drafts and overwrite the draft associated with another user's post.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Camaleon CMS | Camaleon CMS | 2.9.2 | — |
References
- https://fluidattacks.com/es/advisories/billie third-party-advisory
- https://github.com/owen2345/camaleon-cms product
- https://github.com/owen2345/camaleon-cms/pull/1196 patch