Description
phpMyFAQ before 4.1.4 contains missing authorization vulnerabilities in editUser() and updateUserRights() endpoints that allow authenticated administrators to escalate privileges. Non-SuperAdmin users with edit_user permission can set is_superadmin flag or grant arbitrary rights to escalate to SuperAdmin access.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| phpMyFAQ | phpMyFAQ | < 4.1.4 | 4.1.4 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | phpmyfaq/phpmyfaq | < 4.1.4 | 4.1.4 | GHSA-985r-q3qp-299h |
| Packagist | thorsten/phpmyfaq | < 4.1.4 | 4.1.4 | GHSA-985r-q3qp-299h |