ID:12397 - Exploit for Permissions, Privileges, and Access Controls in Camaleon CMS - CVE-2025-2304

Link to public exploit:

Vulnerability description

The vulnerability allows a remote user to escalate privileges on the system.

The vulnerability exists due to use of the dangerous permit! method, which allows all parameters to pass through without any filtering, leading to security restrictions bypass and privilege escalation.

Remediation