Description
OpenCATS before 0.10.0 contains a missing authorization vulnerability in ImportUI::handleRequest() that allows low-privileged authenticated users to roll back data imports. Attackers with READ-level access can request the import module's revert action with an importID to mass-delete imported candidate, company, and contact records.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| opencats | OpenCATS | < 0.10.0 | 0.10.0 |
References
- https://github.com/opencats/OpenCATS/issues/720 issue-tracking
- https://github.com/opencats/OpenCATS/commit/aa3b414c3672f5010ca26c44192aa8e72d3735bd patch
- OpenCATS v0.10.0 Release Notes release-notes
- https://github.com/opencats/OpenCATS/blob/5781f41814f09493c7ce05b9251b5e09c1aff0cd/modules/import/ImportUI.php#L155-L188 technical-description
- VulnCheck Advisory: OpenCATS before 0.10.0 Missing Authorization via Import Revert Action third-party-advisory